CyberSec.Space Logo
Back to CVE Browser

CVE-2017-2921

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1730%
EPSS Percentile8.29th
PublishedNov 7, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An attacker needs to send a specially crafted websocket packet over network to trigger this vulnerability.

Affected Platforms (CPE)

📦
Cesanta

Mongoose

= 6.8

References & Advisories

🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0428
🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0428

Related Vulnerabilities

CVE-2017-28929.8

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A spec...

CVE-2017-28919.8

An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POS...

CVE-2017-28949.8

An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A spec...

CVE-2017-29229.8

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A speciall...