Lucene search
+L

5 matches found

OSV
OSV
•added 2020/09/18 5:15 a.m.•16 views

CVE-2020-25756

A buffer overflow vulnerability exists in the mggethttpheader function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice...

9.8CVSS7.2AI score
SaveExploits0References1
NVD
NVD
•added 2020/09/18 5:15 a.m.•27 views

CVE-2020-25756

A buffer overflow vulnerability exists in the mggethttpheader function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice...

9.8CVSS0.01616EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/09/18 4:44 a.m.•36 views

CVE-2020-25756

A buffer overflow vulnerability exists in the mggethttpheader function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice...

9.7AI score0.01616EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2020/09/18 4:44 a.m.•18 views

CVE-2020-25756

A buffer overflow vulnerability exists in the mggethttpheader function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice...

7.3AI score0.01616EPSS
SaveExploits0References1
CVE
CVE
•added 2020/09/18 4:44 a.m.•75 views

CVE-2020-25756

CVE-2020-25756 affects Cesanta Mongoose 6.18, with a buffer overflow in the mg_get_http_header function caused by missing bounds checking. This can be triggered by crafting an HTTP header and, per the sources, is tied to high-severity potential (NVD CVSS v3.1: CRITICAL; v2: HIGH) with network exp...

9.8CVSS9.5AI score0.01616EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder