Описание
connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.
Ссылки
- Vendor Advisory
- Patch
- Patch
- Vendor Advisory
- Patch
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*
cpe:2.3:a:cherokee:cherokee_httpd:0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:cherokee:cherokee_httpd:0.1.6:*:*:*:*:*:*:*
cpe:2.3:a:cherokee:cherokee_httpd:0.2:*:*:*:*:*:*:*
cpe:2.3:a:cherokee:cherokee_httpd:0.2.5:*:*:*:*:*:*:*
cpe:2.3:a:cherokee:cherokee_httpd:0.2.6:*:*:*:*:*:*:*
cpe:2.3:a:cherokee:cherokee_httpd:0.2.7:*:*:*:*:*:*:*
cpe:2.3:a:cherokee:cherokee_httpd:0.4.6:*:*:*:*:*:*:*
EPSS
Процентиль: 73%
0.00804
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
debian
больше 21 года назад
connection.c in Cherokee web server before 0.4.6 allows remote attacke ...
github
больше 3 лет назад
connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.
EPSS
Процентиль: 73%
0.00804
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other