High severity7.5NVD Advisory· Published Nov 18, 2024· Updated Sep 8, 2026

CVE-2024-42384

Description

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cesanta/Mongoose
cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*
Range: <=7.14
Cesanta/Mongoose Web Serverllm-fuzzy2 versions
<=7.14+ 1 more
- (no CPE)range: <=7.14
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.nozominetworks.com/blognvdProduct
cert-portal.siemens.com/productcert/html/ssa-142885.htmlnvd

News mentions

Siemens Reyrolle 7SR5
CISA ICS Advisories

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000