PT-2021-17023

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose HTTP server version 7.0 Description The issue concerns a remote out-of-bounds OOB write attack via a connection request after exhausting the memory pool. This is specifically related to the mg http serve file function...

Cesanta Mongoose buffer error vulnerability

Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mghttpservefile function in Cesanta Mongoose 7.0. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...