CVE-2020-25756

2020-09-1804:44:50

mitre

www.cve.org

cve-2020-25756

buffer overflow

cesanta mongoose

AI Score

9.7

Confidence

High

EPSS

0.006

Percentile

78.0%

JSON

A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice.

References

github.com/cesanta/mongoose/issues/1135