Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p64m-82xx-9xm7

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.

mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.

EPSS

Процентиль: 76%
0.016
Низкий

Дефекты

CWE-119

Связанные уязвимости

nvd
почти 12 лет назад

mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.

debian
почти 12 лет назад

mini_httpd 1.21 and earlier allows remote attackers to obtain sensitiv ...

CVSS3: 9.8
altlinux
около 6 лет назад

ALT-PU-2020-2953: package `mini_httpd` update to version 1.30-alt1

EPSS

Процентиль: 76%
0.016
Низкий

Дефекты

CWE-119