Back to Database
Status published
Medium
CVE-2023-0809
In Mosquitto before 2.0.16, excessive memory is allocated based on...
Vulnerability Description
In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0809
Credits & Attribution
No credits recorded in the NVD database.
References
More from Eclipse
View All →CVE-2023-5632
Unconditionally adding an event to the epoll causes excessive CPU consumption
High
7.5
CVE-2023-3592
In Mosquitto before 2.0.16, a memory leak occurs when clients...
Medium
5.8
CVE-2021-38443
Eclipse CycloneDDS Improper Handling of Syntactically Invalid Structure
Medium
6.6
CVE-2021-38441
Eclipse CycloneDDS Write-what-where Condition
Medium
6.6
Affected Vendor
Eclipse
View all reports →Affected Software
Mosquitto
Vulnerable Versions:
0
Timeline
Official Publish:
October 2nd, 2023
Last Modified:
February 13th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.