Holger Zimmermann

**Name of the Vulnerable Software and Affected Versions** Pi3Web web server version 2.0.2 Beta 1 **Description** The issue allows remote attackers to cause a denial of service, potentially through a buffer overflow, by sending a malformed URL to the web server. This can happen when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink. **Recommendations** For Pi3Web web server version 2.0.2 Beta 1, consider restricting access to the web server until a fix is available, and avoid using the "Name" column sorting feature with hyperlinks in the Directory Index configuration.