CVE-2023-33657

Name of the Vulnerable Software and Affected Versions NanoMQ version 0.17.2

Description A use-after-free issue exists due to improper data tracing. This can be triggered by calling the function nni mqtt msg get publish property() in the file mqtt msg.c, potentially allowing an attacker to cause a denial of service attack.

Recommendations For NanoMQ version 0.17.2, consider disabling the nni mqtt msg get publish property() function as a temporary workaround until a patch is available.