An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-06-10T16:21:41

Updated: 2024-08-05T11:58:19.083Z

Reserved: 2018-12-22T00:00:00

Link: CVE-2018-20354

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2019-06-10T17:29:02.093

Modified: 2019-06-11T12:51:05.460

Link: CVE-2018-20354

cve-icon Redhat

No data.