CVE-2024-42384

Cesanta · Published November 18, 2024

7.5

CVSS v3.1

HIGH

Description

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

Affected Products

Mongoose <= 7.14

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H