CVE-2023-3592
highPriorität · verfolgen · 30EPSS 0.008 · 56. PerzentilDEEURUUSEPSS · bewertet 2026-10-23
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- Behobenmosquitto-0:2.0.17-1.el8sat.src as a component of Red Hat Satellite 6.13 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.6/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2024:1061 - Behobenmosquitto-0:2.0.17-1.el8sat.x86_64 as a component of Red Hat Satellite 6.13 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.6/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2024:1061 - Behobenmosquitto-debuginfo-0:2.0.17-1.el8sat.x86_64 as a component of Red Hat Satellite 6.13 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.6/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2024:1061 - Behobenmosquitto-debugsource-0:2.0.17-1.el8sat.x86_64 as a component of Red Hat Satellite 6.13 for RHEL 8redhat_csaf
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.6/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2024:1061
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.8–7.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (58)
Betroffene Produkte und Versionsbereiche.
- IBM Integration Bus 10.1 - 10.1.0.1alle Versionencert_bundDEcpe:/a:ibm:integration_bus:10.1_-_10.1.0.1
- createrepo_c-0:1.0.2-2.el8pc.src as a component of Red Hat Satellite 6.13 for RHEL 8alle Versionennot affectedredhat_csafUS
- createrepo_c-0:1.0.2-2.el8pc.x86_64 as a component of Red Hat Satellite 6.13 for RHEL 8alle Versionennot affectedredhat_csafUS
- foreman-0:3.5.1.24-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8alle Versionennot affectedredhat_csafUS
- foreman-0:3.5.1.24-1.el8sat.src as a component of Red Hat Satellite 6.13 for RHEL 8alle Versionennot affectedredhat_csafUS
- foreman-cli-0:3.5.1.24-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8alle Versionennot affectedredhat_csafUS
- foreman-ec2-0:3.5.1.24-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8alle Versionennot affectedredhat_csafUS
Advisories (3)
Hersteller- und Ökosystem-Meldungen dazu.
- RHSA-2024:1061Red Hat Security Advisory: Red Hat Satellite 6 security and bug fix update2024-02-29csaf · redhat_csafUS
An update is now available for Red Hat Satellite 6.13 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
- SCA-2025-0006Vulnerability affecting picoScan and multiScan2025-04-28csaf · sick_psirtDE
SICK has identified a Denial of Service vulnerability (CVE-2025-32472) in picoScan and multiScan, which can cause the web page to become unresponsive. Due to their architectural design, these products are not affected by the other vulnerabilities listed in this advisory. Currently SICK is not aware of any public exploits specifically targeting the vulnerability. SICK recommends applying the mitigation for CVE-2025-32472.
- WID-SEC-W-2023-2724IBM Integration Bus: Mehrere Schwachstellen ermöglichen Denial of ServiceDeutsch2023-10-22csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Integration Bus ausnutzen, um einen Denial of Service Angriff durchzuführen.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (7)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2023-3592/cnnvd
- https://mosquitto.org/blog/2023/08/version-2-0-16-released/cnnvd
- https://security.gentoo.org/glsa/202401-09cnnvd
- https://mosquitto.org/blog/2023/08/version-2-0-16-released/enisa_euvd
- https://security.gentoo.org/glsa/202401-09enisa_euvd
- https://mosquitto.org/blog/2023/08/version-2-0-16-released/Release Notesnvd
- https://security.gentoo.org/glsa/202401-09nvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan