[Bug 1190101] VUL-0: CVE-2020-13849: mosquitto: The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to cause a denial of service
4 Nov
2024
4 Nov
'24
05:04
https://bugzilla.suse.com/show_bug.cgi?id=1190101 https://bugzilla.suse.com/show_bug.cgi?id=1190101#c2 --- Comment #2 from Marcus Meissner <meissner@suse.com> --- openSUSE-SU-2024:0346-1: An update that solves 7 vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1181400,1190048,1190101,1214918,1215864,1215865,1232635,1232636 CVE References: CVE-2020-13849,CVE-2021-34434,CVE-2023-0809,CVE-2023-28366,CVE-2023-3592,CVE-2024-10525,CVE-2024-3935 JIRA References: Sources used: openSUSE Backports SLE-15-SP6 (src): mosquitto-2.0.20-bp156.2.3.1 openSUSE Backports SLE-15-SP5 (src): mosquitto-2.0.20-bp155.3.3.1 -- You are receiving this mail because: You are on the CC list for the bug.
45
Age (days ago)
45
Last active (days ago)
0 comments
1 participants
participants (1)
-
bugzilla_noreply＠suse.com