Security Advisory
CVE-2023-34188
7.5
HIGH
Vulnerability Description
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an attacker can cause an infinite loop in which the server continuously reparses that payload, and does not respond to any other requests.
Published Date
June 23, 2023
Official Source
NIST NVD Advisory