CVE-2018-25193: Mongoose Web Server 6.9 Denial of Service via Socket Connection
Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service by establishing multiple socket connections. Attackers can repeatedly create connections to the default port and send malformed data to exhaust server resources and cause service unavailability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-25193?
CVE-2018-25193 has a medium severity rating as it allows attackers to cause a denial of service by crashing the Mongoose Web Server.
How do I fix CVE-2018-25193?
To fix CVE-2018-25193, you should update to the latest version of Mongoose Web Server that addresses this denial of service vulnerability.
What types of attacks are possible with CVE-2018-25193?
CVE-2018-25193 allows remote attackers to exploit the denial of service vulnerability by establishing multiple socket connections.
Which version of Mongoose Web Server is affected by CVE-2018-25193?
CVE-2018-25193 specifically affects Mongoose Web Server version 6.9.
Can CVE-2018-25193 be exploited remotely?
Yes, CVE-2018-25193 can be exploited remotely by attackers through the default port of the Mongoose Web Server.