CVE-2017-2909: Cesanta Mongoose

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability.

Affected products

• Cesanta Mongoose: version 6.8 only

Published 2017-11-07. Last modified 2026-06-17.