CVE-2017-7185: Use After Free
Use-after-free vulnerability in the mghttpmultipartwaitforboundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7185?
CVE-2017-7185 has a severity rating that indicates it could lead to a denial-of-service condition.
How do I fix CVE-2017-7185?
To fix CVE-2017-7185, upgrade to Cesanta Mongoose Embedded Web Server Library version 6.8 or later or Mongoose OS version 1.3 or later.
What types of systems are affected by CVE-2017-7185?
CVE-2017-7185 affects systems using Cesanta Mongoose Embedded Web Server Library versions up to 6.7 and Mongoose OS versions up to 1.2.
What impact does CVE-2017-7185 have on applications?
CVE-2017-7185 allows remote attackers to crash applications by sending specially crafted multipart/form-data POST requests.
Is CVE-2017-7185 a remote exploit?
Yes, CVE-2017-7185 is a remote exploit as it can be triggered by sending crafted requests over the network.