Vulnerabilities > CVE-2019-19307 - Infinite Loop vulnerability in Cesanta Mongoose 6.16
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |