Home
Description
Use after free in endpoint destructors in Redboltz async_mqtt 10.2.5 allows local users to cause a denial of service via triggering SSL initialization failure that results in incorrect destruction order between io_context and endpoint objects.
References
github.com/redboltz/async_mqtt/issues/436
github.com/redboltz/async_mqtt/pull/437
