CVE-2023-0809

MEDIUM

Eclipse Mosquitto < 2.0.16 - Denial of Service via Malicious Initial Packet

Title source: llm

In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.

Core 2

Core References

Release Notes

Third Party Advisory

CVSS v3 5.8

EPSS 0.0061

EPSS Percentile 44.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-770 CWE-789

Status published

Products (1)

eclipse/mosquitto < 2.0.16

Published Oct 02, 2023

Tracked Since Feb 18, 2026