mongoose vulnerabilities (Ubuntu)
16 vulnerabilities.
-
mongooseUbuntu Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6) 8.8 High -
mongooseUbuntu Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection 7.5 High -
mongooseUbuntu Mongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parser 7.5 High -
mongooseUbuntu Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX 7.5 High -
mongooseUbuntu Cesanta Mongoose MQTT Broker main.c fn stack-based overflow 6.9 Medium -
mongooseUbuntu Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching 9.1 Critical -
mongooseUbuntu Mongoose: Path traversal in SSI #include directives enables arbitrary file read 6.5 Medium -
mongooseUbuntu Mongoose: Reflected XSS via decoded URI in directory listing render 5.4 Medium -
mongooseUbuntu Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE 9.1 Critical -
mongooseUbuntu Mongoose: Stored XSS via unescaped filenames in directory listing 5.4 Medium -
mongooseUbuntu Mongoose: Multipart boundary/header scan logic error in mg_http_next_multipart 6.5 Medium -
mongooseUbuntu Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification 9.3 Critical -
mongooseUbuntu Mongoose: Content-Length + Transfer-Encoding coexistence enables request smuggling 9.1 Critical -
mongooseUbuntu Cesanta Mongoose Out-of-Bounds Read in MG_TLS_BUILTIN ClientHello Session ID Parsing 8.7 High -
mongooseUbuntu Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers... 4.3 Medium -
mongooseUbuntu The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. 7.5 High