CVE-2024-42388: Use of Out-of-range Pointer Offset in Mongoose Web Server library
Published Nov 18, 2024
·Updated
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
Affected Software
1 affected component
Cesanta Mongoose<=7.14
Remediation
Information
It is suggested to update the Mongoose Web Server library to v7.15.
Event History
Nov 18, 2024
CVE Published
via MITRE·09:06 AM
Data Sourced
via MITRE·09:06 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-42388?
CVE-2024-42388 is classified as a medium severity vulnerability due to its potential to cause unintended heap memory access.
2
How do I fix CVE-2024-42388?
To fix CVE-2024-42388, update the Cesanta Mongoose Web Server to version 7.15 or later, which addresses the vulnerability.
3
What systems are affected by CVE-2024-42388?
CVE-2024-42388 affects Cesanta Mongoose Web Server versions up to and including 7.14.
4
What attack vectors are associated with CVE-2024-42388?
CVE-2024-42388 can be exploited by sending unexpected TLS packets to the server.
5
What are the potential consequences of CVE-2024-42388 exploitation?
Exploitation of CVE-2024-42388 may allow attackers to read unintended heap memory space, leading to sensitive information leakage.