Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closing the socket at specific points.
History

Wed, 26 Aug 2026 22:15:00 +0000

Type Values Removed Values Added
Title SIGPIPE Vulnerability in Stomper Broker Causes Denial of Service
Weaknesses CWE-400

Wed, 26 Aug 2026 20:15:00 +0000

Type Values Removed Values Added
Description Stomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose TCP connection was already closed by the peer, the server process receives SIGPIPE and immediately terminates, resulting in a denial of service. Any unauthenticated client can trigger the crash by closing the socket at specific points.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-08-26T19:33:33.216Z

Reserved: 2026-02-16T00:00:00.000Z

Link: CVE-2026-26446

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-26T20:17:11.527

Modified: 2026-08-26T20:17:11.527

Link: CVE-2026-26446

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-26T22:00:04Z