CVE-2024-42384

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

Score

CVSS 3.1 7.5 High

Status

Modified - prodsec@nozominetworks.com

Published

2024-11-18

Last modified

2026-09-08

Weaknesses

CWE-190

Affected products

• Mongoose (Cesanta)
• Mongoose Web Server (Cesanta)
• Reyrolle 7sr5 (Siemens)

References

• https://www.nozominetworks.com/blog
• https://cert-portal.siemens.com/productcert/html/ssa-142885.html