VDB
CVE-2024-42391
CVE-2024-42391
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space.
EPSS 0.28% · 20.6th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS Score
0.28%
20.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cesanta | Mongoose Web Server | 0, 0 |
| cesanta | mongoose | 0, 0 |
Timeline
- Nov 18, 2024 Coalition ESS Score
- Nov 18, 2024 Coalition ESS Score
- Nov 18, 2024 CVE Published
- Nov 18, 2024 PoC Published
- Nov 18, 2024 PoC Published
- Nov 19, 2024 EPSS Score
- Nov 19, 2024 Coalition ESS Score
- Nov 20, 2024 Coalition ESS Score
- Dec 8, 2024 EPSS Score
- Dec 25, 2024 EPSS Score
- Jan 12, 2025 EPSS Score
- Jan 30, 2025 EPSS Score