CVE-2021-26220

The ezxmltoxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

CVE-2021-26530

CVE-2021-26530 describes a vulnerability in Cesanta Mongoose HTTPS server 7.0 when compiled with OpenSSL. The vulnerable component is the mg_tls_init function, which allows a remote out-of-bounds write via a connection request after the memory pool is exhausted. The Connected documents confirm th...

CVE-2021-26530

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26220

The CVE-2021-26220 entry concerns the ezxml_toxml function in ezXML 0.8.6 and earlier, vulnerable to an out-of-bounds write when opening XML after memory pool exhaustion. Connected advisories (SUSE/Mageia/OpenVAS/Nessus) confirm ezXML-related issues in netcdf packages and indicate patches/updates...

CVE-2021-26221

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

CVE-2021-26529

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26221

CVE-2021-26221 affects ezXML 0.8.6 and earlier; the ezxml_new function allows a out-of-bounds write when opening an XML file after memory pool exhaustion. Connections show this vulnerability referenced in netcdf-related advisories (SUSE/Mageia/OpenVAS/Nessus entries) with patches/updates issued f...

CVE-2021-26222

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

CVE-2021-26528

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26528

The CVE-2021-26528 issue affects Cesanta Mongoose HTTP server (7.0) where the function mg_http_serve_file is vulnerable to a remote OOB write after the memory pool is exhausted. This is documented as a high-severity (CVSS v3.1: 9.1, CRITICAL) network-facing vulnerability with potential impact to ...

CVE-2021-26528

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

Cesanta Mongoose 缓冲区错误漏洞

Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mgtlsinit function in Cesanta Mongoose 7.0. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...

CVE-2021-26221: Out-of-bounds Write

The ezxmlnew function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

CVE-2021-26529: Out-of-bounds Write

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

Cesanta Mongoose 缓冲区错误漏洞

Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mgtlsinit function in Cesanta Mongoose 7.0, 6.7-6.18. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...

ezXML 缓冲区错误漏洞

ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmltoxml function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...

CVE-2021-26530: Out-of-bounds Write

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

PT-2021-17024

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose HTTPS server versions 6.7 through 7.0 Description The mg tls init function in the Cesanta Mongoose HTTPS server is vulnerable to a remote out-of-bounds OOB write attack via a connection request after exhausting the memory pool...

CVE-2021-26220: Out-of-bounds Write

The ezxmltoxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...

ezXML 缓冲区错误漏洞

ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmlnew function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...