Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-26529
9.1
CRITICALCVSS v3
Published
February 8, 2021
CVSS v2
6.4 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
cesanta/mongoose
GitHubEmbedded web server, with TCP/IP network stack, MQTT and Websocket
GitHubEmbedded web server, with TCP/IP network stack, MQTT and Websocket= 7.0, >= 6.7, <= 6.18NVD