{"id":"CVE-2018-10945","details":"The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash, or NULL pointer dereference) via an HTTP request, related to the mbuf_insert function.","modified":"2026-08-07T14:49:19.677319Z","published":"2018-06-19T21:29:00.287Z","references":[{"type":"EVIDENCE","url":"http://blog.hac425.top/2018/05/16/CVE-2018-10945-mongoose.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cesanta/mongoose","events":[{"introduced":"2a3cfc985891865af02be85ddb17d10d85b6086a"},{"last_affected":"2a3cfc985891865af02be85ddb17d10d85b6086a"}],"database_specific":{"cpe":"cpe:2.3:a:cesanta:mongoose:6.11:*:*:*:*:*:*:*","extracted_events":[{"introduced":"6.11"},{"last_affected":"6.11"}],"source":"CPE_STRING"}}],"versions":["6.11"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10945.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}