Cesanta Mongoose Vulnerabilidad

Cronología

Versión

6.8	12
6.13	8
6.0	5
6.1	5
6.2	5

Contramedidas

Official Fix	3
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	20

Explotabilidad

High	0
Functional	0
Proof-of-Concept	1
Unproven	0
Not Defined	22

Vector de acceso

Not Defined	0
Physical	0
Local	0
Adjacent	1
Network	22

Autenticación

Not Defined	0
High	0
Low	4
None	19

La interacción del usuario

Not Defined	0
Required	1
None	22

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	3
≤8	7
≤9	13
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	4
≤8	6
≤9	13
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	4
≤7	4
≤8	15
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	2
≤9	3
≤10	16

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	1
≤9	1
≤10	5

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	0
<2k	14
<5k	9
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	14
<2k	9
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (24): 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.7-6.18, 6.8, 6.9, 6.10, 6.11, 6.12, 6.13, 6.16, 6.18, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.10

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2023-08-09	7.1	7.0	Cesanta Mongoose Default Configuration desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2023-2905
2022-02-18	8.5	8.4	Cesanta Mongoose File Name mg_http_upload escalada de privilegios	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-25299
2021-02-09	7.7	7.7	Cesanta Mongoose Connection Request mg_tls_init desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-26530
2021-02-09	7.7	7.7	Cesanta Mongoose Connection Request mg_tls_init desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-26529
2021-02-09	7.7	7.7	Cesanta Mongoose Connection Request mg_http_serve_file desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-26528
2020-09-18	7.7	7.7	Cesanta Mongoose mg_get_http_header desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2020-25756
2019-11-26	8.5	8.5	Cesanta Mongoose mongoose.c desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-19307
2019-06-10	8.5	8.5	Cesanta Mongoose Embedded Web Server Library mongoose.c mg_http_free_proto_data_cgi desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2018-20356
2019-06-10	8.5	8.5	Cesanta Mongoose Embedded Web Server Library mongoose.c mg_http_free_proto_data_cgi desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2018-20355
2019-06-10	8.5	8.5	Cesanta Mongoose Embedded Web Server Library mongoose.c mg_http_get_proto_data desbordamiento de búfer	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2018-20354

13 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 13 results.

más entradas por Cesanta

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!