PT-2018-5237 · Embedthis · Goahead Web Server

Publicado 2018-01-03 · Atualizado 2018-01-17 · CVE-2017-1000471

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EmbedThis GoAhead Webserver version 4.0.0

Description The issue is related to a NULL pointer dereference in the CGI handler, which can result in memory corruption or denial of service.

Recommendations For EmbedThis GoAhead Webserver version 4.0.0, consider disabling the CGI handler as a temporary workaround until a patch is available.

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2017-1000471

Produtos afetados

Goahead Web Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000471 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1000471 · Aviso do Fabricante
• ❌ https://github.com/embedthis/goahead/pull/258 · Nota, Deleted
• ❌ https://github.com/embedthis/goahead/commit/5e6be61e42448f503e75e287dc332b1ecbf2a665#diff-7c9c60c790648b06210f57b9e2f53ca7 · Correção, Deleted