Buffer Overflow in Mongoose Affected by Crafted Hosts File
CVE-2020-25887

8.8HIGH

Key Information:

Vendor

Cesanta

Status
Mongoose
Vendor
CVE Published:
22 August 2023

What is CVE-2020-25887?

A buffer overflow vulnerability exists in Mongoose 6.18 within the mg_resolve_from_hosts_file function. This flaw arises when the application processes a specially crafted hosts file, potentially allowing attackers to exploit the vulnerability to disrupt service or execute arbitrary code. Mitigating this vulnerability is crucial to maintaining system integrity and protecting against potential cyber threats.

References

https://github.com/cesanta/mongoose/issues/1140

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.