swupdate vulnerabilities (Ubuntu)
13 vulnerabilities.
-
swupdateUbuntu SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates 9.2 Critical -
swupdateUbuntu SWUpdate Untrusted Script Execution via Signed Update TOCTOU 7.3 High -
swupdateUbuntu Cesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification 6.3 Medium -
swupdateUbuntu Cesanta Mongoose TCP Option net_builtin.c handle_opt infinite loop 6.9 Medium -
swupdateUbuntu SWUpdate Integer Underflow in Multipart Upload Parser 8.2 High -
swupdateUbuntu Cesanta Mongoose P-384 Public Key mongoose.c mg_tls_verify_cert_signature authorization 6.3 Medium -
swupdateUbuntu Cesanta Mongoose mDNS Record mongoose.c handle_mdns_record stack-based overflow 6.3 Medium -
swupdateUbuntu Cesanta Mongoose TLS 1.3 mongoose.c mg_tls_recv_cert heap-based overflow 6.9 Medium -
swupdateUbuntu Cesanta Mongoose Poly1305 Authentication Tag tls_chacha20.c mg_chacha20_poly1305_decrypt signature verification 6.3 Medium -
swupdateUbuntu Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers... 4.3 Medium -
swupdateUbuntu An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By... 7.5 High -
swupdateUbuntu Cesanta Mongoose MQTT Message Parsing Heap Overflow 8.8 High -
swupdateUbuntu The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. 7.5 High