Here's the page we think you wanted. See search results instead:

Mosca MQTT Invalid Regex Denial of Service

Strike ID:
D19-5iu71
CVSS:
7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
False Positive:
f
Variants:
1
Year:
2018

Description

This strike exploits a denial of service vulnerability in Mosca MQTT broker. When evaluating an invalid regex contained in an MQTT subscribe message, Mosca will terminate abnormally, leading to a denial of service condition.

CVE

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-11615

References

https://documents.trendmicro.com/assets/white_papers/wp-the-fragility-of-industrial-IoTs-data-backbone.pdf

Metasploit

http://www.zerodayinitiative.com/advisories/ZDI-18-583

Zdi

18-583

Bid