In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.6"
},
{
"last_affected": "2.0.11"
}
],
"source": "CPE_RANGE"
}
]
}