A vulnerability in NanoMQ 0.17.5 permits unauthenticated attackers to trigger a Denial of Service through a memory corruption error.

This vulnerability is a segmentation fault occurring in the pub_handler.c file. It allows an unauthenticated remote attacker to crash the service by sending a maliciously crafted PUBLISH message.

The successful exploitation of this vulnerability results in a Denial of Service, which can disrupt critical message brokering operations. Given the CVSS score of 7.5, this high-severity flaw poses a significant risk to system availability, potentially halting data transmission across infrastructure relying on NanoMQ.

Immediate Action: Review the provided vendor references on GitHub to identify specific hotfixes or mitigation guidance for the pub_handler.c component.

Proactive Monitoring: Monitor NanoMQ service logs for frequent crashes or unexpected process terminations that may indicate exploitation attempts.

Compensating Controls: Implement network-level filtering to restrict access to the MQTT broker, ensuring that only trusted sources can reach the service endpoint.

Public Exploit Available: Unknown.

Organizations utilizing NanoMQ 0.17.5 must prioritize the assessment of their exposure to this vulnerability. Given the availability of a proof-of-concept and the potential for service disruption, administrators should apply available vendor patches or mitigations as soon as they are released to ensure continuous system stability.