CVE-2017-2921— Cesanta Mongoose 数字错误漏洞

N/A

An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet can cause an integer overflow, leading to a heap buffer overflow and resulting in denial of service and potential remote code execution. An attacker needs to send a specially crafted websocket packet over network to trigger this vulnerability.

N/A

N/A

Cesanta Mongoose 数字错误漏洞

Cesanta Mongoose是爱尔兰Cesanta公司的一套嵌入式服务器库，它包括TCP、HTTP客户端和服务器、WenSocket客户端和服务器等功能。Websocket protocol是其中的一个Websocket通信协议。 Cesanta Mongoose 6.8版本中的Websocket protocol实现存在整数溢出漏洞。远程攻击者可通过发送特制的websocket数据包利用该漏洞造成拒绝服务或执行代码。

N/A

N/A