CVE-2024-42389: Use of Out-of-range Pointer Offset in Mongoose Web Server library
Published Nov 18, 2024
·Updated
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
Affected Software
1 affected component
Cesanta Mongoose<=7.14
Remediation
Information
It is suggested to update the Mongoose Web Server library to v7.15.
Event History
Nov 18, 2024
CVE Published
via MITRE·09:06 AM
Data Sourced
via MITRE·09:06 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-42389?
CVE-2024-42389 is classified as a high severity vulnerability due to its potential to allow attackers to read unintended heap memory.
2
How do I fix CVE-2024-42389?
To mitigate CVE-2024-42389, upgrade Cesanta Mongoose Web Server to a version higher than 7.14.
3
What systems are affected by CVE-2024-42389?
CVE-2024-42389 affects Cesanta Mongoose Web Server versions up to and including 7.14.
4
What is the impact of CVE-2024-42389?
The impact of CVE-2024-42389 includes potential data leakage and unauthorized access to sensitive information.
5
How can attackers exploit CVE-2024-42389?
Attackers can exploit CVE-2024-42389 by sending unexpected TLS packets to force the application to read unintended memory.