Weston-embedded

Uc-http

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-45318

Exploit
  • EPSS 0.61%
  • Veröffentlicht 20.02.2024 15:15:08
  • Zuletzt bearbeitet 12.02.2025 18:50:45

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted network packet can lead to arbitrary code execution. An attacker can send a malicious packet to trig...

9.8

CVE-2023-31247

Exploit
  • EPSS 0.37%
  • Veröffentlicht 14.11.2023 10:15:28
  • Zuletzt bearbeitet 21.11.2024 08:01:42

A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this ...

9.8

CVE-2023-27882

Exploit
  • EPSS 0.33%
  • Veröffentlicht 14.11.2023 10:15:27
  • Zuletzt bearbeitet 21.11.2024 07:53:37

A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger th...

9.8

CVE-2023-28379

Exploit
  • EPSS 0.28%
  • Veröffentlicht 14.11.2023 10:15:27
  • Zuletzt bearbeitet 21.11.2024 07:54:57

A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulner...

9.8

CVE-2023-28391

Exploit
  • EPSS 0.37%
  • Veröffentlicht 14.11.2023 10:15:27
  • Zuletzt bearbeitet 21.11.2024 07:54:58

A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulner...

9.8

CVE-2023-24585

Exploit
  • EPSS 0.3%
  • Veröffentlicht 14.11.2023 10:15:26
  • Zuletzt bearbeitet 21.11.2024 07:48:10

An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

9.8

CVE-2023-25181

Exploit
  • EPSS 0.3%
  • Veröffentlicht 14.11.2023 10:15:26
  • Zuletzt bearbeitet 21.11.2024 07:49:15

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packet to trigge...