Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2025-14822

Высокий

ALT-PU-2025-14822: package mongoose update to version 7.20-alt1

Источник
errata.altlinux.org
Дата публикации
21.11.2025
Дата обновления
21.11.2025
Устраненные уязвимости
1

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades mongoose to version 7.20-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 года назад

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.

CVSS3: 7.5
redhat
около 1 года назад

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.

CVSS3: 7.5
nvd
около 1 года назад

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.

CVSS3: 7.5
debian
около 1 года назад

An integer overflow vulnerability exists in the WebSocket component of ...

CVSS3: 7.5
github
около 1 года назад

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the application to crash. If downstream vendors integrate this component improperly, the issue may lead to a buffer overflow.