Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2017-10910

Good to know:

icon
icon

Date: December 27, 2017

MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition. Converted from WS-2018-0007, on 2022-11-08.

Language: JS

Severity Score

Related Resources (9)

https://nvd.nist.gov/vuln/detail/CVE-2017-10910
https://github.com/advisories/GHSA-h9mj-fghc-664w
https://github.com/mqttjs/MQTT.js/releases/tag/v2.15.0
https://github.com/mqttjs/MQTT.js
https://github.com/nodejs/security-wg/blob/master/vuln/npm/357.json
https://jvn.jp/en/jp/JVN45494523/index.html
https://www.npmjs.com/advisories/555
https://github.com/mqttjs/MQTT.js/commit/403ba53b838f2d319a0c0505a045fe00239e9923
https://www.mend.io/vulnerability-database/CVE-2017-10910

Severity Score

Weakness Type (CWE)

Resource Management Errors

CWE-399

Uncontrolled Recursion

CWE-674

Top Fix

icon

Upgrade Version

Upgrade to version mqtt - 2.15.0

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us