7.5
High
CVE-2024-42384 Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
Description
Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mongoose Web Server 7.14 | earliest → 7.14 | No fix stated |
| Mongoose 7.1 | earliest → 7.1.4 | No fix stated |
| Reyrolle 7SR5 2.70 | earliest → < 2.70 | 2.70 |
Other CVEs of Mongoose Web Server
The 11 CVEs of Mongoose Web Server →
CVE-2018-25193
Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service…
8.7
High
CVE-2024-42392
Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite…
4.0
Medium
CVE-2024-42391
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
4.3
Medium
CVE-2024-42390
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
4.3
Medium