Mongoose@6.18 Security Vulnerabilities and Issues — Mongoose@6.18 CVE List

Lucene search

CesantaMongoose6.18

2 matches found

CVE•added 2020/09/18 5:15 a.m.•38 views

CVE-2020-25756

A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice.

9.8CVSS9.5AI score0.0099EPSS

CVE•added 2023/08/22 7:16 p.m.•26 views

CVE-2020-25887

Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file.

8.8CVSS8.7AI score0.00226EPSS