Mongoose Denial of Service Vulnerability

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. A security vulnerability exists in the 'mghandlecgi' function of the mongoose.c file in Cesanta Mongoose version 6.11. A...

PT-2018-10201

Name of the Vulnerable Software and Affected Versions Mongoose version 6.11 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, or a NULL pointer dereference, via an HTTP request. This is related to the mbuf...