CVE:CVE-2019-11779
CNNVD:CNNVD-201909-894
Eclipse Mosquitto是Eclipse基金会的一套开源的消息代理软件。
Eclipse Mosquitto 1.5.0版本至1.6.5版本中存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade eclipse mosquitto to a higher version than 1.5.9,1.6.6,and avoid the version [1.5,1.5.9),[1.6,1.6.6); Upgrade canonical ubuntu_linux to a higher version than 19.04,and avoid the version 19.04; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade fedoraproject fedora to a higher version than 29,30,31,and avoid the version 29,30,31; Upgrade debian debian_linux to a higher version than 8.0,10.0,and avoid the version 8.0,10.0