p PatchFirst

CVE-2024-36856

CVE-2024-36856

This page contains facts from public vulnerability sources. Check the original advisory before updating.

RMQTT Broker 0.4.0 is vulnerable to Denial of Service (DoS) due to improper session resource management. An attacker can exhaust system memory and crash the daemon by establishing and maintaining a vast number of long-lived malicious publish/subscribe sessions.

CVSS 7.5 · High · EPSS 0.5%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • broker Ubuntu:22.04:LTS

    Versions
    • 1.4.0+ds1-1
    • 1.4.0+ds1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →