CVE-2017-2909

Published: Nov 7, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability.

Affected (1)

Products: Cesanta: Mongoose

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cesanta Mongoose	Version 6.8

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (2)

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0416

Source: talos-cna@cisco.com

Technical DescriptionThird Party Advisory

https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0416

Source: af854a3a-2127-422b-91ae-364da2661108

Technical DescriptionThird Party Advisory

Timeline

No history available yet.