CVE-2024-42385 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters...

CVE-2024-42385 Improper Neutralization of Delimiters in Mongoose Web Server library

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters...

CVE-2024-42384 Integer Overflow or Wraparound in Mongoose Web Server library

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application...

CVE-2024-42384

CVE-2024-42384 affects Cesanta Mongoose Web Server, version 7.14. The issue is an Integer Overflow or Wraparound in the server, enabling an attacker to send an unexpected TLS packet and cause a segmentation fault in the application. Documents consistently describe the vulnerability as impacting M...

CVE-2024-42384 Integer Overflow or Wraparound in Mongoose Web Server library

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application...

CVE-2024-42383 Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field...

CVE-2024-42383 Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field...

CVE-2024-42383 Use of Out-of-range Pointer Offset in Mongoose Web Server library

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field...

CVE-2024-42383

The CVE-2024-42383 entry concerns Cesanta Mongoose Web Server v7.14. The vulnerability is described as an Out-of-range Pointer Offset that lets an attacker write a NULL byte beyond the memory space allocated for the hostname field. NVD lists CVSS v3.1 base score 9.8 (CRITICAL) with network attack...

PT-2024-29916

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose Web Server version 7.14 Description The issue allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space due to an Out-of-range Pointer Offset vulnerability...

CVE-2024-42385: Improper Neutralization of Delimiters

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters...

CVE-2024-42387: Use of Out-of-range Pointer Offset

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

PT-2024-29914 · Cesanta · Cesanta Mongoose Web Server

Name of the Vulnerable Software and Affected Versions: Cesanta Mongoose Web Server version 7.14 Description: The issue involves an out-of-range pointer offset, allowing an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space. This can lead to...

CVE-2024-42391: Use of Out-of-range Pointer Offset

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

PT-2024-29918

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose Web Server version 7.14 Description The issue allows an attacker to send an unexpected TLS packet, forcing the application to read unintended heap memory space due to an out-of-range pointer offset. Recommendations For Cesanta...

PT-2024-29919

Name of the Vulnerable Software and Affected Versions Cesanta Mongoose Web Server version 7.14 Description The issue involves improper neutralization of delimiters, which can trigger an infinite loop bug if the input string contains unexpected characters. This is due to the improper handling of...

CVE-2024-42390: Use of Out-of-range Pointer Offset

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...

CVE-2024-52429: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through = 2.0...

CVE-2024-42383: Use of Out-of-range Pointer Offset

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field...

CVE-2024-42386: Use of Out-of-range Pointer Offset

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application...