8.6

CVE-2024-34199

Medienbericht
Exploit
TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sending excessively large elements in the request line.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ritlabs ≫ Tinyweb Version <= 1.94
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.23% 0.649
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.6 3.9 4.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
13.01.2026 11:10
https://github.com/DMCERTCE/PoC_Tiny_Overflow
Exploit
https://github.com/maximmasiutin/TinyWeb/commit/2584082
https://github.com/maximmasiutin/TinyWeb/commit/d49c3da