Unrated severityNVD Advisory· Published Jun 10, 2019· Updated Aug 5, 2024
CVE-2018-20355
CVE-2018-20355
Description
An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Cesanta/Mongoose Embedded Web Server Librarydescription
- Range: <=6.13
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.