CVE-2024-42390
Use of Out-of-range Pointer Offset in Mongoose Web Server library
概要
Use of Out-of-range Pointer Offset in Mongoose Web Server library
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory nozominetworks.com
- package github.com