Описание
mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mini-httpd | fixed | 1.21-1 | package | |
| mini-httpd | no-dsa | squeeze | package | |
| mini-httpd | no-dsa | wheezy | package |
EPSS
Процентиль: 74%
0.016
Низкий
Связанные уязвимости
nvd
больше 11 лет назад
mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.
github
больше 4 лет назад
mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.
EPSS
Процентиль: 74%
0.016
Низкий