5.3
Medium
CVE-2024-42388 Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
Description
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mongoose Web Server 7.14 | earliest → 7.14 | No fix stated |
| Mongoose 7.1 | earliest → 7.1.4 | No fix stated |
Other CVEs of Mongoose Web Server
The 11 CVEs of Mongoose Web Server →
CVE-2018-25193
Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service…
8.7
High
CVE-2024-42392
Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite…
4.0
Medium
CVE-2024-42391
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
4.3
Medium
CVE-2024-42390
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an…
4.3
Medium