CVE-2017-2921

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An...

CVE-2017-2921

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An...

CVE-2017-2921

Cesanta Mongoose 6.8 Websocket implementation contains a memory corruption flaw in websocket frame handling. During parsing, an integer overflow in data_len/frame_len calculations can cause a large, misvalidated memory write in mg_deliver_websocket_data, leading to a heap-buffer-overflow. Reporte...