{"id":"CVE-2024-44775","details":"kmqtt v0.2.7 is vulnerable to Denial of Service (DoS) due to a Null Pointer Exception. A remote attacker can cause the broker to crash by sending a specially crafted MQTT CONNECT packet that triggers an unhandled null reference, leading to an immediate process termination.","modified":"2026-08-29T11:45:51.218556733Z","published":"2024-10-15T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44775.json","cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://gist.github.com/pengwGit/26fd8630392af5d8829c2e220091ac4f"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/44xxx/CVE-2024-44775.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44775"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/davidepianca98/kmqtt","events":[{"introduced":"5cf87845360c40cc8f4adf5dd2ff0ef43f181348"},{"last_affected":"5cf87845360c40cc8f4adf5dd2ff0ef43f181348"}],"database_specific":{"source":"CPE_STRING","cpe":"cpe:2.3:a:davidepianca98:kmqtt:0.2.7:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0.2.7"},{"last_affected":"0.2.7"}]}}],"versions":["0.2.7"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-44775.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}