Test ID:	1.3.6.1.4.1.25623.1.0.131349
Category:	Web Servers
Title:	Cesanta Mongoose Web Server 7.14 Multiple Vulnerabilities
Summary:	Cesanta Mongoose Web Server is prone to multiple; vulnerabilities.
Description:	Summary: Cesanta Mongoose Web Server is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2024-42383: Cesanta Mongoose Web Server allows to write a NULL byte value beyond the memory space dedicated for the hostname field. - CVE-2024-42384, CVE-2024-42386: Cesanta Mongoose Web Server allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application. - CVE-2024-42385: Cesanta Mongoose Web Server allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters. - CVE-2024-42387, CVE-2024-42388, CVE-2024-42389, CVE-2024-42390, CVE-2024-42391: Cesanta Mongoose Web Server allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space. - CVE-2024-42392: Cesanta Mongoose Web Server allows to trigger an infinite loop bug if the input string contains unexpected characters. Affected Software/OS: Mongoose Web Server probably version 7.14 only. Solution: No known solution is available as of 04th December, 2024. Information regarding this issue will be updated once solution details are available. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-42383 Common Vulnerability Exposure (CVE) ID: CVE-2024-42384 Common Vulnerability Exposure (CVE) ID: CVE-2024-42385 Common Vulnerability Exposure (CVE) ID: CVE-2024-42386 Common Vulnerability Exposure (CVE) ID: CVE-2024-42387 Common Vulnerability Exposure (CVE) ID: CVE-2024-42388 Common Vulnerability Exposure (CVE) ID: CVE-2024-42389 Common Vulnerability Exposure (CVE) ID: CVE-2024-42390 Common Vulnerability Exposure (CVE) ID: CVE-2024-42391 Common Vulnerability Exposure (CVE) ID: CVE-2024-42392
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.