What’s Vulnerable › Vulnerabilities

CVE-2021-34432

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-07-27 · updated 2026-07-02
• Weakness: CWE-20

Description

In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.

Affected products

• The Eclipse Foundation Eclipse Mosquitto: through 2.0.7

References

• https://bugs.eclipse.org/bugs/show_bug.cgi?id=574141
• https://bugs.eclipse.org/bugs/show_bug.cgi?id=574141

Get alerted when CVE-2021-34432 or the next vulnerability affects your stack