In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4823-1 advisory.

    It was discovered that Mosquitto incorrectly handled certain inputs. A remote attacker could possibly use     this issue to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA71655 advisory.

  - The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A     malicious client could cause other clients that do reject invalid UTF-8 strings to disconnect themselves     from the broker by sending a topic string which is not valid UTF-8, and so cause a denial of service for     the clients. (CVE-2017-7653)

  - In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto     Broker. Unauthenticated clients can send crafted CONNECT packets which could cause a denial of service in     the Mosquitto Broker. (CVE-2017-7654)

  - In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the     Mosquitto library which could lead to crashes for those applications using the library. (CVE-2017-7655)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2793 advisory.

  - In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the     Mosquitto library which could lead to crashes for those applications using the library. (CVE-2017-7655)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Several issues have been found in mosquitto, a MQTT version 3.1/3.1.1 compatible message broker.

CVE-2017-7655

A Null dereference vulnerability in the Mosquitto library could lead to crashes for those applications using the library.

CVE-2018-12550

An ACL file with no statements was treated as having a default allow policy. The new behaviour of an empty ACL file is a default policy of access denied. (this is in compliance with all newer releases)

CVE-2018-12551

Malformed authentication data in the password file could allow clients to circumvent authentication and get access to the broker.

CVE-2019-11779

Fix for processing a crafted SUBSCRIBE packet containing a topic that consists of approximately 65400 or more '/' characters. (setting TOPIC_HIERARCHY_LIMIT to 200)

For Debian 8 'Jessie', these problems have been fixed in version 1.3.4-2+deb8u4.

We recommend that you upgrade your mosquitto packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
183609	Ubuntu 16.04 ESM / 18.04 ESM : Mosquitto vulnerability (USN-4823-1)	Nessus	Ubuntu Local Security Checks	high
178191	Juniper Junos OS Multiple Vulnerabilities (JSA71655)	Nessus	Junos Local Security Checks	high
154627	Debian DLA-2793-1 : mosquitto - LTS security update	Nessus	Debian Local Security Checks	high
130285	Debian DLA-1972-1 : mosquitto security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-7655

high

Tenable Plugins

high

high

high

high