GHSA-gh78-48h3-frjq

Improper exception handling in Aedes

Source: GitHub Advisory Database (reviewed) High CVE-2020-13410

Packages

Ecosystem	Package	Affected	Fixed in
npm	aedes	< 0.42.1	0.42.1

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in MoscaJS Aedes 0.42.0 and fixed in 0.42.1. lib/write.js does not properly consider exceptions during the writing of an invalid packet to a stream.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2020-13410 advisory
https://github.com/moscajs/aedes/pull/493 web
https://github.com/moscajs/aedes/commit/8d34ee5819cfc983d57e49b45d8c5ef70a76d79b web
https://payatu.com/advisory/dos-in-aedes-mqtt-broker web