CVE-2021-33176

Name of the Vulnerable Software and Affected Versions VerneMQ MQTT Broker versions prior to 1.12.0

Description The issue is related to a denial of service attack due to excessive memory consumption. This occurs when the message broker handles untrusted inputs, causing it to consume large amounts of memory. As a result, the application is terminated by the operating system.

Recommendations For VerneMQ MQTT Broker versions prior to 1.12.0, update to version 1.12.0 or later to resolve the issue. As a temporary workaround, consider implementing input validation to restrict the handling of untrusted inputs.