Skip to content
OpenAdvisories
Medium · 4.0 CVE-2024-42385 EUVD-2024-39589GHSA-fj5v-9mxj-77qc

Improper Neutralization of Delimiters in Mongoose Web Server library

Published Nov 18, 2024 · Updated Sep 8, 2026 · Assigned by Nozomi

Description

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.

Affected products

VendorProductAffectedFixed
Cesanta Mongoose Web Server ≤ 7.14 —

Advisories 3

References