CyberRota Analysis
AI-GeneratedStomper 5e2741e is vulnerable to a Use-After-Free issue that occurs when a client repeatedly sends SUBSCRIBE commands and subsequently closes the connection, leading to improper cleanup of internal subscription structures. This flaw can be exploited by unauthenticated clients to cause a denial of service by crashing the broker process. Organizations using this broker should prioritize addressing this vulnerability to maintain service availability and prevent potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then closes that connection, the broker performs incorrect cleanup of its internal subscription structures. This results in a heap use-after-free during StompClient destruction, causing the broker process to crash. An unauthenticated client can exploit this to reliably trigger a denial of service.