What the vulnerability does

01Description

VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system.

Key dates

02Disclosure timeline

June 8, 2021 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE