CVE-2024-42387: Use of Out-of-range Pointer Offset in Mongoose Web Server library
Published Nov 18, 2024
·Updated
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
Affected Software
1 affected component
Cesanta Mongoose<=7.14
Remediation
Information
It is suggested to update the Mongoose Web Server library to v7.15.
Event History
Nov 18, 2024
CVE Published
via MITRE·09:06 AM
Data Sourced
via MITRE·09:06 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-42387?
CVE-2024-42387 is classified as a high severity vulnerability due to its potential to compromise application security.
2
How do I fix CVE-2024-42387?
To fix CVE-2024-42387, update Cesanta Mongoose Web Server to version 7.15 or later.
3
What impact does CVE-2024-42387 have on my system?
CVE-2024-42387 may allow an attacker to access unintended memory regions, leading to potential data leakage or application crashes.
4
Is CVE-2024-42387 being actively exploited?
There have been no confirmed reports of active exploitation specifically targeting CVE-2024-42387 at this time.
5
Which versions of Cesanta Mongoose are affected by CVE-2024-42387?
CVE-2024-42387 affects all versions of Cesanta Mongoose up to and including version 7.14.