CVE-2017-7185 in Cesanta MongooseOS

Résumé (Anglaise)

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a multipart/form-data POST request without a MIME boundary string.

Réserver

19/03/2017

Divulgation

10/04/2017

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
99553	Cesanta MongooseOS/Mongoose Embedded Web Server Library mongoose.c mg_http_multipart_wait_for_boundary buffer overflow	416	Preuve de concept	Correctif officiel	CVE-2017-7185