CVE-2017-7655 — NULL Pointer Dereference in Eclipse Foundation Eclipse Mosquitto

CWE-476 — NULL Pointer Dereference7 documents7 sources
Severity
7.5HIGHNVD
EPSS
0.9%
top 24.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
THE Eclipse Foundation Eclipse MosquittoEclipse MosquittoDebian Linux
Timeline
PublishedMar 27
Latest updateMay 13

Description

In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5the_eclipse_foundation/eclipse_mosquitto1.0 — unspecified+1
▶Debianeclipse/mosquitto< 1.5.4-1+3
▶NVDeclipse/mosquitto1.0 — 1.4.15

Also affects: Debian Linux 8.0, 9.0

🔴Vulnerability Details

3
GHSA
GHSA-gg85-hmcj-cx9p: In Eclipse Mosquitto version from 1↗2022-05-13
▶
OSV
CVE-2017-7655: In Eclipse Mosquitto version from 1↗2019-03-27
▶
CVEList
CVE-2017-7655: In Eclipse Mosquitto version from 1↗2019-03-27
▶

📋Vendor Advisories

2
Ubuntu
Mosquitto vulnerability↗2021-03-15
▶
Debian
CVE-2017-7655: mosquitto - In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerabilit...↗2017
▶

💬Community

1
Bugzilla
CVE-2017-7655 mosquitto: null-pointer dereference causing dos↗2019-03-29
▶
CVE-2017-7655 — NULL Pointer Dereference | cvebase