Vulnerabilities > CVE-2018-10945 - NULL Pointer Dereference vulnerability in Cesanta Mongoose 6.11
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash, or NULL pointer dereference) via an HTTP request, related to the mbuf_insert function.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |