CVE-2023-33656
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A memory leak vulnerability exists in NanoMQ version 0.17.2. The issue is located in the file message.c and could be exploited by an attacker to perform a denial of service attack by consuming all available memory resources.
Risk Assessment
The organization may experience service interruptions due to memory resource exhaustion, potentially leading to application unavailability.
Recommendation
It is recommended to update NanoMQ to the latest version to mitigate this vulnerability and to monitor memory usage in the system.
Original NVD description (English source)
A memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack by causing the program to consume all available memory resources.