Zero-friction vulnerability management platform

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Mongoose Web Server 'mg_handle_cgi' Function Denial of Service Vulnerability (Windows)

Information

Severity

Severity

Medium

Family

Family

Denial of Service

CVSSv2 Base

CVSSv2 Base

5.0

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Solution Type

Solution Type

Vendor Patch

Created

Created

4 years ago

Modified

Modified

3 years ago

Summary

The host is installed with Mongoose Web Server Server and is prone to denial of service vulnerability.

Insight

Insight

The flaw exists due to heap-based buffer over-read error in 'mg_handle_cgi' function in 'mongoose.c' script.

Affected Software

Affected Software

Mongoose version 6.11, other versions might be affected as well.

Detection Method

Detection Method

Checks if a vulnerable version is present on the target host.

Solution

Solution

Update to version 6.12 or later.

Common Vulnerabilities and Exposures (CVE)