What is GHSA-gh78-48h3-frjq?

GHSA-gh78-48h3-frjq is a security advisory published by GitHub Security Advisories with High severity. Improper exception handling in Aedes

Which CVE IDs does GHSA-gh78-48h3-frjq cover?

GHSA-gh78-48h3-frjq covers the following CVE IDs: CVE-2020-13410. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gh78-48h3-frjq?

GHSA-gh78-48h3-frjq has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-gh78-48h3-frjq?

GHSA-gh78-48h3-frjq affects 1 product, including: npm/aedes:\u003c 0.42.1.

GHSA-gh78-48h3-frjqHighCVSS 7.5

Improper exception handling in Aedes

Vendor

GitHub Security Advisories

Published

May 6, 2021

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2020-13410 →

📋 Description

An issue was discovered in MoscaJS Aedes 0.42.0 and fixed in 0.42.1. lib/write.js does not properly consider exceptions during the writing of an invalid packet to a stream.

🎯 Affected products1

npm/aedes:< 0.42.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-13410
https://github.com/moscajs/aedes/pull/493
https://github.com/moscajs/aedes/commit/8d34ee5819cfc983d57e49b45d8c5ef70a76d79b
https://payatu.com/advisory/dos-in-aedes-mqtt-broker
https://github.com/advisories/GHSA-gh78-48h3-frjq