Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Mqtt-packet Project Subscribe
Filtered by product Mqtt-packet
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-5432 1 Mqtt-packet Project 1 Mqtt-packet 2021-11-03 5.0 MEDIUM 7.5 HIGH
A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for decoding.
CVE-2016-10523 1 Mqtt-packet Project 1 Mqtt-packet 2019-10-09 5.0 MEDIUM 7.5 HIGH
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.