CVE-2026-115417
개요
A flaw was found in aws-c-mqtt. A remote attacker can cause a Denial of Service (DoS) in client applications due to improper memory allocation handling within the MQTT (Message Queuing Telemetry Transport) compatibility adapter. By triggering an excessive memory allocation request, an attacker can exhaust available system memory, causing the application to crash or become unresponsive.
내용
This vulnerability is rated as Important severity because an unauthenticated remote entity can trigger complete client application termination via memory exhaustion without requiring privileges or user interaction. While integrity and confidentiality are preserved, the potential for remote denial of service across network connections elevates the risk above Moderate. In standard Red Hat enterprise environments, this package is not included in base Red Hat Enterprise Linux distributions and is primarily distributed through community channels such as EPEL, thereby limiting widespread exposure.
취약점 이해 (CWE)
Availability
Technical Impact: DoS: Resource Consumption (CPU); DoS: Resource Consumption (Memory); DoS: Resource Consumption (Other)
When allocating resources without limits, an attacker could prevent other systems, applications, or processes from accessing the same type of resource. It can be easy for an attacker to consume many resources by rapidly making many requests or causing larger resources to be used than is needed.
