CVE-2024-42388
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Nov 18, 2024
Updated: Nov 19, 2024
CWE ID 823
Summary
CVE-2024-42388 is a newly disclosed vulnerability affecting Cesanta Mongoose Web Server version 7.14. An attacker can exploit this Out-of-range Pointer Offset issue to send unexpected TLS packets, causing the application to read unintended memory locations in the heap. This could potentially lead to information disclosure or code execution with the privileges of the Mongoose Web Server process. System administrators are advised to update to the latest version of Mongoose Web Server as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Cesanta Software Limited