8.2
High
CVE-2024-42386 Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
Description
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mongoose Web Server 7.14 | earliest → 7.14 | No fix stated |
| Mongoose 7.1 | earliest → 7.1.4 | No fix stated |
| Reyrolle 7SR5 2.70 | earliest → < 2.70 | 2.70 |
Other CVEs of Mongoose Web Server
The 11 CVEs of Mongoose Web Server →
CVE-2018-25193
Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service…
8.7
High
CVE-2024-42392
Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite…
4.0
Medium
CVE-2024-42391
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
4.3
Medium
CVE-2024-42390
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
4.3
Medium