1112 matches found
Mongoose Web Server < 6.17 DoS Vulnerability
Mongoose Web Server is prone to a denial of service DoS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Cesanta Mongoose Input Validation Error Vulnerability
Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. An input validation error vulnerability exists in Cesanta Mongoose. The vulnerability stems from a network system or...
CVE-2019-19307
An integer overflow in parsemqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS infinite loop, or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet...
CVE-2019-19307
CVE-2019-19307 affects Cesanta Mongoose 6.16. The vulnerability is an integer overflow in the parse_mqtt function in mongoose.c that can be triggered by a crafted MQTT protocol packet, leading to remote denial of service (infinite loop) and possibly an out-of-bounds write. Reports from multiple s...
PT-2019-15804 · Cesanta · Mongoose
Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose version 6.16 Description: The issue is related to an integer overflow in the parse mqtt function in mongoose.c, which can be exploited by sending a crafted MQTT protocol packet. This could lead to a remote Denial of Service D...
Mongoose Web Server < 6.15 Buffer Overflow Vulnerability
Mongoose Web Server is prone to a heap-based buffer overflow in parsemqtt. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
Mongoose Buffer Overflow Vulnerability
Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. A buffer overflow vulnerability exists in the 'parsemqtt' function of the mgmqtt.c file in Cesanta Mongoose versions pri...
Cesanta Mongoose Embedded Web Server Library Resource Management Error Vulnerability (CNVD-2019-22663)
Cesanta Mongoose Embedded Web Server Library is a cross-platform embedded server and web library written in C. It is designed to be used with a wide range of applications, including... A resource management error vulnerability exists in the 'mghttpgetprotodata' function of the mongoose.c file in...
CVE-2018-20356
An invalid read of 8 bytes due to a use-after-free vulnerability in the mghttpfreeprotodatacgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...
CVE-2018-20352
Use-after-free vulnerability in the mgcgievhandler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...
CVE-2018-20353
An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mghttpgetprotodata function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...
CVE-2018-20352
Use-after-free vulnerability in the mgcgievhandler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...
Remote code execution
An invalid write of 8 bytes due to a use-after-free vulnerability in the mghttpfreeprotodatacgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...
CVE-2018-20356
CVE-2018-20356 — affected software: Cesanta Mongoose Embedded Web Server Library (
CVE-2018-20355
An invalid write of 8 bytes due to a use-after-free vulnerability in the mghttpfreeprotodatacgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service application crash or remote code execution...
CVE-2018-20355
The CVE-2018-20355 issue affects Cesanta Mongoose Embedded Web Server Library 6.13 and earlier. A use-after-free in mg_http_free_proto_data_cgi within mongoose.c leads to an invalid write of 8 bytes, enabling either application crash (DoS) or remote code execution. The vulnerability details indic...
CVE-2018-20354
The CVE-2018-20354 issue affects Cesanta Mongoose Embedded Web Server Library (versions 6.13 and earlier). A use-after-free in mg_http_get_proto_data during a return causes an invalid read of 8 bytes, leading to denial of service (crash) or remote code execution. NVD data shows high/critical impa...
CVE-2018-20353
The CVE affects Cesanta Mongoose Embedded Web Server Library, versions 6.13 and earlier, where a use-after-free causes an invalid read of 8 bytes in mg_http_get_proto_data. This vulnerability can lead to a denial of service (application crash) or remote code execution. No exploitation details are...
