Логотип exploitDog
bind:CVE-2021-31226
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-31226

Количество 3

Количество 3

nvd логотип

CVE-2021-31226

больше 4 лет назад

An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to lack of size validation. This vulnerability requires the attacker to send a crafted HTTP POST request with a URI longer than 50 bytes. This leads to a heap overflow in wbs_post() via an strcpy() call.

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-3qrq-p37g-j4wm

больше 3 лет назад

An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to lack of size validation. This vulnerability requires the attacker to send a crafted HTTP POST request with a URI longer than 50 bytes. This leads to a heap overflow in wbs_post() via an strcpy() call.

EPSS: Низкий
fstec логотип

BDU:2021-04492

больше 4 лет назад

Уязвимость стеков TCP/IP NicheLite и InterNiche, связанная с ошибками обработки HTTP-запросов, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-31226

An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to lack of size validation. This vulnerability requires the attacker to send a crafted HTTP POST request with a URI longer than 50 bytes. This leads to a heap overflow in wbs_post() via an strcpy() call.

CVSS3: 9.8
2%
Низкий
больше 4 лет назад
github логотип
GHSA-3qrq-p37g-j4wm

An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to lack of size validation. This vulnerability requires the attacker to send a crafted HTTP POST request with a URI longer than 50 bytes. This leads to a heap overflow in wbs_post() via an strcpy() call.

2%
Низкий
больше 3 лет назад
fstec логотип
BDU:2021-04492

Уязвимость стеков TCP/IP NicheLite и InterNiche, связанная с ошибками обработки HTTP-запросов, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.1
2%
Низкий
больше 4 лет назад

Уязвимостей на страницу