description: In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT packets which could cause a denial of service in the Mosquitto Broker.
problem types: CWE-401: Improper Release of Memory Before Removing Last Reference
affected:
{
product: Eclipse Mosquitto
vendor: The Eclipse Foundation
versions:
lessThanOrEqual: 1.4.15, status: affected, version: unspecified, versionType: custom
}