CVE-2024-42384CWE-190

CVE-2024-42384

High · published November 18, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
40.8
In the wild
Unconfirmed
What it is

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00485 · 40.8th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2024-11-18T15:15Z
Affected products (1)
ProductVersionsFixed in
cesanta/mongoose≤ 7.14—
References (2)
https://www.nozominetworks.com/blog · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-142885.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 18 NOV 09:04Z
    Integer Overflow or Wraparound in Mongoose Web Server library
    cvelistv5