CVE-2018-12543

In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, then an assert is triggered that should otherwise not be reachable and Mosquitto will exit.
References
Link Resource
https://bugs.eclipse.org/bugs/show_bug.cgi?id=539295 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-11-15 15:29

Updated : 2024-02-04 20:03


NVD link : CVE-2018-12543

Mitre link : CVE-2018-12543

CVE.ORG link : CVE-2018-12543


JSON object : View

Products Affected

eclipse

  • mosquitto
CWE
CWE-20

Improper Input Validation

CWE-617

Reachable Assertion