PT-2018-5237 · Embedthis · Goahead Web Server

Published 2018-01-03 · Updated 2018-01-17 · CVE-2017-1000471

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EmbedThis GoAhead Webserver version 4.0.0

Description The issue is related to a NULL pointer dereference in the CGI handler, which can result in memory corruption or denial of service.

Recommendations For EmbedThis GoAhead Webserver version 4.0.0, consider disabling the CGI handler as a temporary workaround until a patch is available.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2017-1000471

Affected Products

Goahead Web Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000471 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000471 · Vendor Advisory
• ❌ https://github.com/embedthis/goahead/commit/5e6be61e42448f503e75e287dc332b1ecbf2a665#diff-7c9c60c790648b06210f57b9e2f53ca7 · Patch, Deleted
• ❌ https://github.com/embedthis/goahead/pull/258 · Note, Deleted