CVE-2023-0809

In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.

• https://mosquitto.org/blog/2023/08/version-2-0-16-released/
  Release Notes
• https://security.gentoo.org/glsa/202401-09
• https://mosquitto.org/blog/2023/08/version-2-0-16-released/
  Release Notes
• https://security.gentoo.org/glsa/202401-09