PT-2019-12966 · Goahead · Goahead

Publicado 2019-06-14 · Atualizado 2021-07-21 · CVE-2019-12822

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GoAhead versions prior to 4.1.1 GoAhead versions 5.x prior to 5.0.1

Description A header parsing issue in the http.c file causes a memory assertion and out-of-bounds memory reference, potentially leading to a denial-of-service (DoS). This can be triggered by a colon on a line by itself.

Recommendations For GoAhead versions prior to 4.1.1, update to version 4.1.1 or later. For GoAhead versions 5.x prior to 5.0.1, update to version 5.0.1 or later.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-917

Identificadores relacionados

CVE-2019-12822

Produtos afetados

Goahead

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-12822 · Nota de Segurança
• ❌ https://github.com/embedthis/goahead/compare/5349710...579f21f · Correção, Deleted
• ❌ https://github.com/embedthis/goahead/issues/285 · Correção, Deleted
• https://osv.dev/vulnerability/CVE-2019-12822 · Aviso do Fabricante