Boletines de Vulnerabilidades

DSA-4570 mosquitto - security update

   
Software afectado Debian
 
A vulnerability was discovered in mosquitto, a MQTT version 3.1/3.1.1compatible message broker, allowing a malicious MQTT client to cause adenial of service (stack overflow and daemon crash), by sending aspecially crafted SUBSCRIBE packet containing a topic with a extremelydeep hierarchy.

More info:

https://www.debian.org/security/2019/dsa-4570