CVE-2021-33176

HIGH

VerneMQ < 1.12.0 - Denial of Service via Untrusted Input Handling

Title source: llm
STIX 2.1

Description

VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0110
EPSS Percentile 61.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-502 CWE-770
Status published
Products (1)
octavolabs/vernemq < 1.12.0
Published Jun 08, 2021
Tracked Since Feb 18, 2026