Vulnerabilities > CVE-2019-19307 - Infinite Loop vulnerability in Cesanta Mongoose 6.16
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |