Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-1010218

Опубликовано: 22 июл. 2019
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv[0] to an insane length with execl. The fixed version is: There's no fix yet.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:cherokee-project:cherokee_web_server:*:*:*:*:*:*:*:*
Версия до 1.2.103 (включая)

EPSS

Процентиль: 62%
0.00429
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-120
CWE-787

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 6 лет назад

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv[0] to an insane length with execl. The fixed version is: There's no fix yet.

CVSS3: 7.5
debian
больше 6 лет назад

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Cu ...

CVSS3: 7.5
github
больше 3 лет назад

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv[0] to an insane length with execl. The fixed version is: There's no fix yet.

EPSS

Процентиль: 62%
0.00429
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-120
CWE-787