CVE-2023-34188
—CVSS 3.1
7.5 high
EPSS
1%p61
Published
()
Modified
Description
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an attacker can cause an infinite loop in which the server continuously reparses that payload, and does not respond to any other requests.
- Vendors
- cesanta
- Products
- mongoose
- Weakness
- CWE-1284
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.