description: In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
problem types: CWE-1050
affected:
{
vendor: The Eclipse Foundation
product: Eclipse Mosquitto
versions:
version: 1.6, status: affected, lessThan: unspecified, versionType: custom
version: unspecified, lessThanOrEqual: 2.0.11, status: affected, versionType: custom
}