CVE-2023-3592

Name of the Vulnerable Software and Affected Versions Mosquitto versions prior to 2.0.16

Description A memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types. This issue can be exploited by a remote attacker to cause a denial of service.

Recommendations For Mosquitto versions prior to 2.0.16, update to version 2.0.16 or later to resolve the memory leak issue. As a temporary workaround, consider restricting the handling of v5 CONNECT packets with will messages to minimize the risk of exploitation.