CVE-2025-51495

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an at...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2025-51495 swupdate
Ubuntu UBUNTU-CVE-2025-51495 swupdate

Références

advisory github.com
advisory nvd.nist.gov
package github.com
package github.com
patch github.com