CVE-2021-33176

Katalog CVE

CVSS 7.5 · High EPSS 1,1%

Kerentanan Deserialization of Untrusted Data pada octavolabs vernemq. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system.

Rincian

Terbit di NVD

8 Juni 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data
CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.synopsys.com/blogs/software-security/cyrc-advisory-rabbitmq-emqx-vernemq advisory pihak ketiga