Description

An issue was discovered in MoscaJS Aedes 0.42.0. lib/write.js does not properly consider exceptions during the writing of an invalid packet to a stream.

Remediation

References

https://cwe.mitre.org/data/definitions/248.html

https://github.com/moscajs/aedes/pull/493

https://payatu.com/advisory/dos-in-aedes-mqtt-broker

Related Vulnerabilities

CVE-2014-2066 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2013-4942 Vulnerability in maven package org.webjars:yui

CVE-2020-28280 Vulnerability in npm package predefine

CVE-2023-26110 Vulnerability in npm package node-bluetooth

CVE-2023-2972 Vulnerability in npm package @antfu/utils

Severity

High

Classification

CWE-755 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Technical Description Patch Third Party Advisory Exploit