swupdate vulnerabilities (Debian)
23 vulnerabilities.
-
swupdateDebian SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates 9.2 Critical -
swupdateDebian SWUpdate Untrusted Script Execution via Signed Update TOCTOU 7.3 High -
swupdateDebian Cesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification 6.3 Medium -
swupdateDebian Cesanta Mongoose TCP Option net_builtin.c handle_opt infinite loop 6.9 Medium -
swupdateDebian SWUpdate Integer Underflow in Multipart Upload Parser 8.2 High -
swupdateDebian Cesanta Mongoose P-384 Public Key mongoose.c mg_tls_verify_cert_signature authorization 6.3 Medium -
swupdateDebian Cesanta Mongoose mDNS Record mongoose.c handle_mdns_record stack-based overflow 6.3 Medium -
swupdateDebian Cesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow 6.9 Medium -
swupdateDebian Cesanta Mongoose Poly1305 Authentication Tag tls_chacha20.c mg_chacha20_poly1305_decrypt signature verification 6.3 Medium -
swupdateDebian Cesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source 6.3 Medium -
swupdateDebian Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values 6.3 Medium -
swupdateDebian Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers... 4.3 Medium -
swupdateDebian An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By... 7.5 High -
swupdateDebian Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts... 8.8 High -
swupdateDebian Cesanta Mongoose MQTT Message Parsing Heap Overflow 8.8 High -
swupdateDebian The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. 7.5 High -
swupdateDebian The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is... 9.1 Critical -
swupdateDebian The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS... 9.1 Critical -
swupdateDebian The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB... 9.1 Critical -
swupdateDebian ** DISPUTED ** A buffer overflow vulnerability exists in the mg_get_http_header function in... 9.8 Critical -
swupdateDebian An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to... 9.8 Critical -
swupdateDebian mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read. 7.5 High -
swupdateDebian An issue was discovered in Mongoose before 6.15. The parse_mqtt() function in mg_mqtt.c has a... 9.8 Critical