Vulnerabilities > CVE-2018-20355 - Use After Free vulnerability in Cesanta Mongoose
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 14 |