Skip to content

Cesanta Mongoose vulnerabilities

cesanta mongooseAn invalid read of 8 bytes due to a use-after-free vulnerability in the...CVE-2018-203569.8 CriticalJune 10, 2019
cesanta mongooseAn invalid write of 8 bytes due to a use-after-free vulnerability in the...CVE-2018-203559.8 CriticalJune 10, 2019
cesanta mongooseAn invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the...CVE-2018-203549.8 CriticalJune 10, 2019
cesanta mongooseAn invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the...CVE-2018-203539.8 CriticalJune 10, 2019
cesanta mongoose embedded web server libraryUse-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose...CVE-2018-203528.8 HighJune 10, 2019
cesanta mongooseIn Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function.CVE-2018-195876.5 MediumNovember 27, 2018
cesanta mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing...CVE-2018-18765Fix available9.1 CriticalOctober 28, 2018
cesanta mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing...CVE-2018-18764Fix available9.1 CriticalOctober 28, 2018
cesanta mongooseThe mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a...CVE-2018-10945Fix available7.5 HighJune 19, 2018
automattic mongooseAn exploitable memory corruption vulnerability exists in the Websocket protocol implementation of...CVE-2017-2922Fix available9.8 CriticalNovember 7, 2017
automattic mongooseAn exploitable memory corruption vulnerability exists in the Websocket protocol implementation of...CVE-2017-2921Fix available8.1 HighNovember 7, 2017
automattic mongooseAn infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8...CVE-2017-2909Fix available7.5 HighNovember 7, 2017
automattic mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing...CVE-2017-2895Fix available8.2 HighNovember 7, 2017
automattic mongooseAn exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing...CVE-2017-2894Fix availableEPSS 31.0%9.8 CriticalNovember 7, 2017
automattic mongooseAn exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing...CVE-2017-2893Fix availableEPSS 24.9%7.5 HighNovember 7, 2017
automattic mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing...CVE-2017-2892Fix available9.8 CriticalNovember 7, 2017
automattic mongooseAn exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta...CVE-2017-2891Fix available9.8 CriticalNovember 7, 2017
cesanta mongoose embedded web server libraryCross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote...CVE-2017-11567Public exploit8.8 HighSeptember 7, 2017
cesanta mongoose embedded web server library, mongoose os +1 moreUse-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in...CVE-2017-7185Public exploitEPSS 12.3%7.5 HighApril 10, 2017