CVE-2017-10910

    Dashboard / Vulnerabilities / CVE-2017-10910

    CVE-2017-10910

    Published: 28 Dec 2017Last Modified: 8 Jul 2026

    Summary:

    Details: MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.

    References: https://github.com/mqttjs/MQTT.js/releases/tag/v2.15.0, https://jvn.jp/en/jp/JVN45494523/index.html, https://github.com/mqttjs/MQTT.js/commit/403ba53b838f2d319a0c0505a045fe00239e9923

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- eb1ce59c4507fb5c0b969e0b45c100b55b075542
    Fixed -941f3ebe6fb0b633ce3382f2d0f3660bb4d9915e

    Affected versions

    v2.14.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2017-10910 | CVE-DB