Segmentation Fault in TLS Handling
CVE-2024-42386

7.5HIGH

Key Information:

Vendor

Cesanta

Status
Mongoose
Vendor
CVE Published:
18 November 2024

What is CVE-2024-42386?

The Out-of-range Pointer Offset vulnerability in the Cesanta Mongoose Web Server version 7.14 allows an attacker to exploit the application by sending an unexpected TLS packet. This exploitation can trigger a segmentation fault, causing the application to crash and potentially disrupt services. Such vulnerabilities can be particularly concerning as they may open pathways for further attacks, highlighting the importance of prompt patches and security updates to protect against this threat.

References

https://www.nozominetworks.com/labs/vulnerability-advisor...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.