CVE-2024-42391CWE-823

CVE-2024-42391

Medium · published November 18, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.0th percentile
Weakness
CWE-823 · Use of Out-of-range Pointer Offset
Published
2024-11-18T15:15Z
Affected products (1)
ProductVersionsFixed in
cesanta/mongoose≤ 7.14—
References (2)
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42391 · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-142885.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 18 NOV 09:07Z
    Use of Out-of-range Pointer Offset in Mongoose Web Server library
    cvelistv5