CVE-2017-2909

🗓️ 07 Nov 2017 16:00:00Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 60 Views

An infinite loop programming error in Cesanta Mongoose 6.8 library's DNS server can result in high CPU usage and Denial Of Service via a specially crafted DNS request

Reporter	Title	Published	Views	Family All 15
CNVD	Cesanta Mongoose Denial of Service Vulnerability	2 Nov 201700:00	–	cnvd
Check Point Advisories	Cesanta Mongoose DNS Compressed Name Denial of Service (CVE-2017-2909)	16 Nov 201700:00	–	checkpoint_advisories
Cvelist	CVE-2017-2909	7 Nov 201716:00	–	cvelist
Debian CVE	CVE-2017-2909	7 Nov 201716:00	–	debiancve
EUVD	EUVD-2017-12050	7 Oct 202500:30	–	euvd
NVD	CVE-2017-2909	7 Nov 201716:29	–	nvd
OpenVAS	Mongoose Web Server <= 6.8 Multiple Vulnerabilities	7 Jul 202100:00	–	openvas
OSV	DEBIAN-CVE-2017-2909	7 Nov 201716:29	–	osv
Prion	Security feature bypass	7 Nov 201716:29	–	prion
RedhatCVE	CVE-2017-2893	20 May 202223:50	–	redhatcve

NVD

Vulners

Node

cesanta mongooseMatch6.8

[
  {
    "product": "Mongoose",
    "vendor": "Cesanta",
    "versions": [
      {
        "status": "affected",
        "version": "6.8"
      }
    ]
  }
]