Описание
route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution.
Ссылки
- ExploitIssue TrackingMitigationThird Party Advisory
- ExploitIssue TrackingMitigationThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2021-04-02 (включая)
cpe:2.3:a:alekseykurepin:pico_http_server_in_c:*:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.04943
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-787
CWE-787
Связанные уязвимости
CVSS3: 9.8
github
около 2 лет назад
route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution.
EPSS
Процентиль: 89%
0.04943
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-787
CWE-787