p PatchFirst

CVE-2019-19307

CVE-2019-19307

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause an out-of-bounds write, by sending a crafted MQTT protocol packet.

CVSS 9.8 · Critical · EPSS 42.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • swupdate Debian:12

    Affected ranges
    • ECOSYSTEM: < 2021.04-1

    Update to 2021.04-1

  • swupdate Debian:13

    Affected ranges
    • ECOSYSTEM: < 2021.04-1

    Update to 2021.04-1

  • swupdate Debian:14

    Affected ranges
    • ECOSYSTEM: < 2021.04-1

    Update to 2021.04-1

Original sources

Check your server →