CVE-2016-10523

Description

MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.

References

https://nodesecurity.io/advisories/75

https://github.com/mqttjs/mqtt-packet/pull/8

https://github.com/mcollina/mosca/issues/393

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-0286

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS