CVEvulnerability

CVE-2021-33176

7.5 HIGH Published 2021-06-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-502, CWE-770

Description

VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system.

Affected configurations

• octavolabs vernemq (< 1.12.0)

Related

Weakness · CWE (2)

  • CWE-502 Deserialization of Untrusted Data weakness
  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References