Description (CNA)
In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| The Eclipse Foundation / Eclipse Mosquitto | affected 1.0 before unspecified; affected unspecified through 1.4.15 |
CWE
CWE-476
References
- https://bugs.eclipse.org/bugs/show_bug.cgi?id=533775
- https://lists.debian.org/debian-lts-announce/2019/10/msg00035.html
- https://lists.debian.org/debian-lts-announce/2021/10/msg00022.html
ADP enrichment
No English description supplied.