CVE-2024-42383 | Nozomi Networks Labs

Summary

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedicated for the hostname field.

Impact

By exploiting this issue it is possible to write a NULL byte value beyond the memory space dedicated for the hostname field.

Issue Date

November 14, 2024

Affects

This issue affects Mongoose Web Server v7.14

CVE Name

CVE-2024-42383

CVSS Details

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L

CVSS Score

4.2

Solution

It is highly recommended to not expose the vulnerable component inside an untrusted network.

Mitigations

Acknowledgements

Gabriele Quagliarella of Nozomi Networks

Nozomi Threat Intelligence

Nozomi Networks Labs curates threat and vulnerability insights that are continuously fed into the Nozomi Networks platform to ensure our sensors can detect existing and emerging threats and vulnerabilities that threaten customers environments.

Learn more