CVE-2017-7655

State: Published
Severity: Not scored
Published: Mar 27, 2019
Updated: Aug 5, 2024
Reserved: Apr 11, 2017

Description

In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library.

Scores

The record has no CVSS score.

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
Eclipse MosquittoThe Eclipse Foundation	1.0 to before unspecifiedAffected 1.4.15 and earlierAffected

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=533775
[debian-lts-announce] 20191026 [SECURITY] [DLA 1972-1] mosquitto security updatemailing-list
[debian-lts-announce] 20211027 [SECURITY] [DLA 2793-1] mosquitto security updatemailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.