CyberSec.Space Logo
返回 CVE 浏览器

CVE-2017-2894

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0340%
EPSS Percentile31.12th
Published2017年11月7日
Last Modified2026年5月13日

Vulnerability Description

An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause a stack buffer overflow resulting in remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.

Affected Platforms (CPE)

📦
Cesanta

Mongoose

= 6.8

References & Advisories

🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401
🔗 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401

相关漏洞威胁

CVE-2017-29219.8

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A speciall...

CVE-2017-28929.8

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A spec...

CVE-2017-28919.8

An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POS...

CVE-2017-29229.8

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A speciall...