CVE-2017-7185

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier…

published April 10, 2017

CVSS
—
EPSS
12%
Percentile
96.2
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12251 · 96.2th percentile
Published
2017-04-10T15:00Z
EPSS history
Timeline
  • 10 APR 15:00Z
    Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier…
    cvelistv5