CVE-2025-51495
CVE-2025-51495
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.
CVSS 7.5 · High · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
swupdate Debian:12
- Versions
- 2022.12+dfsg-4
- 2022.12+dfsg-4+deb12u1
- 2022.12+dfsg-4+deb12u1~bpo11+1
- 2022.12+dfsg-4+deb12u2
- 2023.05+dfsg-1
- 2023.05+dfsg-2
- 2023.05+dfsg-2~bpo12+1
- 2023.05+dfsg-3
- 2023.05+dfsg-4
- 2023.05+dfsg-5
- 2023.05+dfsg-5~bpo12+1
- 2023.12+dfsg-1
- 2023.12+dfsg-1~bpo12+1
- 2023.12.1+dfsg-1
- 2023.12.1+dfsg-1~bpo12+1
- 2023.12.1+dfsg-2
- 2023.12.1+dfsg-2~bpo12+1
- 2024.05+dfsg-1
- 2024.05.2+dfsg-1
- 2024.05.2+dfsg-2
- 2024.05.2+dfsg-2~bpo12+1
- 2024.12+dfsg-1
- 2024.12+dfsg-2
- 2024.12+dfsg-2~bpo12+1
- 2024.12.1+dfsg-1
- 2024.12.1+dfsg-1~bpo12+1
- 2024.12.1+dfsg-2
- 2024.12.1+dfsg-3
- 2024.12.1+dfsg-3~bpo12+1
- 2025.05+dfsg-1
- 2025.05+dfsg-2
- 2025.05+dfsg-2~bpo13+1
- 2025.05+dfsg-3
- 2025.05+dfsg-3~bpo13+1
- 2025.12+dfsg-1
- 2025.12+dfsg-10
- 2025.12+dfsg-10~bpo13+1
- 2025.12+dfsg-10~bpo13+2
- 2025.12+dfsg-2
- 2025.12+dfsg-2~bpo13+1
- 2025.12+dfsg-3
- 2025.12+dfsg-4
- 2025.12+dfsg-5
- 2025.12+dfsg-6
- 2025.12+dfsg-7
- 2025.12+dfsg-7~bpo13+1
- 2025.12+dfsg-8
- 2025.12+dfsg-9
- 2026.05+dfsg-1
- 2026.05+dfsg-2
- 2026.05+dfsg-3
- 2026.05+dfsg-3~bpo13+1
- 2026.05+dfsg-4
- 2026.05.1+dfsg-1
- 2026.05.1+dfsg-1~bpo13+1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
swupdate Debian:13
- Versions
- 2024.12.1+dfsg-3
- 2024.12.1+dfsg-3+deb13u1
- 2024.12.1+dfsg-3+deb13u2
- 2025.05+dfsg-1
- 2025.05+dfsg-2
- 2025.05+dfsg-2~bpo13+1
- 2025.05+dfsg-3
- 2025.05+dfsg-3~bpo13+1
- 2025.12+dfsg-1
- 2025.12+dfsg-10
- 2025.12+dfsg-10~bpo13+1
- 2025.12+dfsg-10~bpo13+2
- 2025.12+dfsg-2
- 2025.12+dfsg-2~bpo13+1
- 2025.12+dfsg-3
- 2025.12+dfsg-4
- 2025.12+dfsg-5
- 2025.12+dfsg-6
- 2025.12+dfsg-7
- 2025.12+dfsg-7~bpo13+1
- 2025.12+dfsg-8
- 2025.12+dfsg-9
- 2026.05+dfsg-1
- 2026.05+dfsg-2
- 2026.05+dfsg-3
- 2026.05+dfsg-3~bpo13+1
- 2026.05+dfsg-4
- 2026.05.1+dfsg-1
- 2026.05.1+dfsg-1~bpo13+1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
swupdate Debian:14
- Versions
- 2024.12.1+dfsg-3
- 2025.05+dfsg-1
- 2025.05+dfsg-2
- 2025.05+dfsg-2~bpo13+1
- 2025.05+dfsg-3
- 2025.05+dfsg-3~bpo13+1
- Affected ranges
- ECOSYSTEM: < 2025.12+dfsg-1
Update to 2025.12+dfsg-1
swupdate Ubuntu:22.04:LTS
- Versions
- 2020.11-2
- 2021.04-1.1
- 2021.04-2
- 2021.04-2build1
- 2021.11-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
swupdate Ubuntu:24.04:LTS
- Versions
- 2023.05+dfsg-3
- 2023.05+dfsg-4
- 2023.05+dfsg-4build1
- 2023.05+dfsg-5
- 2023.12+dfsg-1
- 2023.12.1+dfsg-1ubuntu1
- 2023.12.1+dfsg-1ubuntu4
- 2023.12.1+dfsg-1ubuntu5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
swupdate Ubuntu:25.10
- Versions
- 2024.12.1+dfsg-1build2
- 2024.12.1+dfsg-2
- 2024.12.1+dfsg-3
- 2025.05+dfsg-2ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published