Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2020-25756
HistorySep 18, 2020 - 4:44 a.m.

CVE-2020-25756

2020-09-1804:44:50
mitre
github.com
4
cesanta mongoose
buffer overflow
cve-2020-25756
bounds checking
http header exploit

AI Score

7.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has stated "this will not happen in practice.

AI Score

7.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2020-25756