Описание
mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mini-httpd | fixed | 1.21-1 | package | |
| mini-httpd | no-dsa | squeeze | package | |
| mini-httpd | no-dsa | wheezy | package |
EPSS
Связанные уязвимости
mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.
mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.
ALT-PU-2020-2953: package `mini_httpd` update to version 1.30-alt1
EPSS