Vulnerabilities > Cesanta > Mongoose > High

DATE CVE VULNERABILITY TITLE RISK
2017-11-07 CVE-2017-2909 Infinite Loop vulnerability in Cesanta Mongoose 6.8
An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library.
network
low complexity
cesanta CWE-835
7.5
2017-11-07 CVE-2017-2895 Out-of-bounds Read vulnerability in Cesanta Mongoose 6.8
An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8.
network
low complexity
cesanta CWE-125
8.2
2017-11-07 CVE-2017-2893 NULL Pointer Dereference vulnerability in Cesanta Mongoose 6.8
An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8.
network
low complexity
cesanta CWE-476
7.5