Skip to content

Known vulnerabilities in Cesanta Mongoose

Is your version affected?

CVE Summary Score Published
CVE-2024-42387 Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an… 5.3 Medium Nov 18, 2024
CVE-2024-42386 Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an… 8.2 High Nov 18, 2024
CVE-2024-42384 Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an… 7.5 High Nov 18, 2024
CVE-2024-35492 Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c 7.5 High May 29, 2024
CVE-2023-2905 Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header,… Not rated Aug 9, 2023
CVE-2017-2921 An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8 8.1 High Nov 7, 2017
CVE-2017-2909 An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library 7.5 High Nov 7, 2017
CVE-2017-2891 An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8 9.8 Critical Nov 7, 2017
CVE-2017-2895 An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose… 8.2 High Nov 7, 2017
CVE-2017-2922 An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8 9.8 Critical Nov 7, 2017
CVE-2017-2894 An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose… 9.8 Critical Nov 7, 2017
CVE-2017-2893 An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta… 7.5 High Nov 7, 2017
CVE-2017-2892 An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose… 9.8 Critical Nov 7, 2017

Other Cesanta products