CVE-2021-26530

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26530

CVE-2021-26530 describes a vulnerability in Cesanta Mongoose HTTPS server 7.0 when compiled with OpenSSL. The vulnerable component is the mg_tls_init function, which allows a remote out-of-bounds write via a connection request after the memory pool is exhausted. The Connected documents confirm th...

CVE-2021-26530

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26529

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26528

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26529

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26529

The CVE-2021-26529 issue affects Cesanta Mongoose HTTPS server (versions 7.0 and 6.7–6.18 compiled with mbedTLS). The root cause is an out-of-bounds write in mg_tls_init triggered by a connection request after memory pool exhaustion, enabling a remote write condition. Documents indicate this is a...

CVE-2021-26528

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26528

The CVE-2021-26528 issue affects Cesanta Mongoose HTTP server (7.0) where the function mg_http_serve_file is vulnerable to a remote OOB write after the memory pool is exhausted. This is documented as a high-severity (CVSS v3.1: 9.1, CRITICAL) network-facing vulnerability with potential impact to ...

CVE-2021-26529

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

PT-2021-17025

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose HTTPS server version 7.0 Description The issue concerns a remote out-of-bounds OOB write attack via a connection request after exhausting the memory pool. This is related to the mg tls init function in the Cesanta Mongoose HTT...

PT-2021-17024

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose HTTPS server versions 6.7 through 7.0 Description The mg tls init function in the Cesanta Mongoose HTTPS server is vulnerable to a remote out-of-bounds OOB write attack via a connection request after exhausting the memory pool...

CVE-2021-26529: Out-of-bounds Write

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

CVE-2021-26528: Out-of-bounds Write

The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

PT-2021-17023

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose HTTP server version 7.0 Description The issue concerns a remote out-of-bounds OOB write attack via a connection request after exhausting the memory pool. This is specifically related to the mg http serve file function...

CVE-2021-26530: Out-of-bounds Write

The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 compiled with OpenSSL support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...

A directory traversal vulnerability exists in the Cesanta Mongoose server.

Cesanta Mongoose is a suite of embedded servers from Cesanta, Ireland. A directory traversal vulnerability exists in the Cesanta Mongoose server, which can be exploited by an attacker to obtain directory information...

Cesanta Mongoose Buffer Overflow Vulnerability

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. A buffer overflow vulnerability exists in Cesanta Mongoose version 6.18. The vulnerability stems from the mggethttpheade...

CVE-2020-25756

A buffer overflow vulnerability exists in the mggethttpheader function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice...

CVE-2020-25756

A buffer overflow vulnerability exists in the mggethttpheader function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice...