CVE-2017-7655

published 2019-03-27

CVE-2017-7655: In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those…

Priority P3 35 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	debian_linux	—	—
debian	mosquitto	< mosquitto 1.5.4-1 (bookworm)	mosquitto 1.5.4-1 (bookworm)
eclipse	mosquitto	>= 0 < 1.5.4-1	1.5.4-1
eclipse	mosquitto	>= 0 < 1.5.4-1	1.5.4-1
eclipse	mosquitto	>= 0 < 1.5.4-1	1.5.4-1
eclipse	mosquitto	>= 0 < 1.5.4-1	1.5.4-1
eclipse	mosquitto	1.0 – 1.4.15	—
the_eclipse_foundation	eclipse_mosquitto	>= 1.0 < unspecified	unspecified
the_eclipse_foundation	eclipse_mosquitto	unspecified – 1.4.15	—

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P

osv 7.5 HIGH

vendor_debian 7.5 LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-476