Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2020-25887
Disclosure Date: August 22, 2023 (last updated October 08, 2023)
Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file.
0
Attacker Value
Unknown
CVE-2020-25756
Disclosure Date: September 18, 2020 (last updated February 22, 2025)
A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice.
0
