Cesanta Mongoose Web Server 安全漏洞

Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C from Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from the presence of out-of-range pointer offsets that allow an attacker to send unexpected...

PT-2024-29917 · Cesanta · Cesanta Mongoose Web Server

Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose Web Server version 7.14 Description: The issue allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space due to an Out-of-range Pointer Offset vulnerability...

Cesanta Mongoose Web Server 安全漏洞

Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C by Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from an improper delimiter neutralization that causes an infinite loop error to be triggered...

Cesanta Mongoose Web Server 安全漏洞

Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C from Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from the presence of out-of-range pointer offsets, which could allow an attacker to send...

Cesanta MJS mjs_array_length function denial of service vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. Designed for microcontrollers with limited resources. The main design goals were a small footprint and simple C/C++ interoperability. A denial of service vulnerability exists in the Cesanta MJS mjsarraylength function,...

CVE-2024-35492

Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MQTT packet...

CVE-2024-35492

Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MQTT packet...

CVE-2024-35492

The CVE-2024-35492 entry concerns Cesanta Mongoose commit b316989, where a NULL pointer dereference in the scpy function (src/fmt.c) can trigger a Denial of Service via a crafted MQTT packet. Public records consistently identify the affected component as Cesanta Mongoose and attribute the issue t...

CVE-2024-35492

Cesanta Mongoose commit b316989 was discovered to contain a NULL pointer dereference via the scpy function at src/fmt.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MQTT packet...

PT-2024-26516 · Cesanta · Mongoose

Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose version b316989 Description: The issue is related to a NULL pointer dereference via the scpy function at src/fmt.c. This allows attackers to cause a Denial of Service DoS via a crafted MQTT packet. Recommendations: For versio...

Cesanta Mongoose 安全漏洞

Cesanta Mongoose is a suite of embedded server libraries from the Irish company Cesanta, which includes functionality for TCP, HTTP clients and servers, and WenSocket clients and servers. A security vulnerability exists in Cesanta Mongoose version b316989, which stems from a null pointer...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35386

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in mjs.c. The CVSSv3.1 base score is 4.3 (Medium) with network access, low attack complexity, and low privileges required. APT/exploitation details are not provided; PT-2024-26471 ...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...