CVE-2023-34188
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.0%
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an attacker can cause an infinite loop in which the server continuously reparses that payload, and does not respond to any other requests.
Produtos afetados
n/a · n/aReferências
https://blog.narfindustries.com/blog/narf-discovers-critical-vulnerabilities-in-cesanta-mongoose-http-serverhttps://github.com/cesanta/mongoose/commit/4663090a8fb036146dfe77718cff612b0101cb0fhttps://github.com/cesanta/mongoose/compare/7.9...7.10https://github.com/cesanta/mongoose/pull/2197https://security.netapp.com/advisory/ntap-20250228-0001/