9.0
Critical
CVE-2023-25181 A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01
Description
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Gecko Platform | 4.3.1.0 | No fix stated |
| Cesium NET | 3.07.01 | No fix stated |
| uC-HTTP | 3.01.01 | No fix stated |
| gecko_software_development_kit | 4.3.1 | No fix stated |
| cesium_net | 3.07.01 | No fix stated |
| uc-http | 3.01.01 | No fix stated |
Other CVEs of Gecko Platform
The 9 CVEs of Gecko Platform →
CVE-2023-39540
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP…
5.9
Medium
CVE-2023-39541
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP…
5.9
Medium
CVE-2023-45318
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit…
10.0
Critical
CVE-2023-24585
An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01
7.7
High