4.0
Medium
CVE-2024-42385 Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an…
Description
Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mongoose Web Server 7.14 | earliest → 7.14 | No fix stated |
| Reyrolle 7SR5 2.70 | earliest → < 2.70 | 2.70 |
Other CVEs of Mongoose Web Server
The 11 CVEs of Mongoose Web Server →
CVE-2018-25193
Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service…
8.7
High
CVE-2024-42392
Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite…
4.0
Medium
CVE-2024-42391
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
4.3
Medium
CVE-2024-42390
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
4.3
Medium