Skip to content
Sign in
9.0 Critical

CVE-2023-28391 A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP…

Description

A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Gecko Platform 4.3.1.0 No fix stated
Cesium NET 3.07.01 No fix stated
uC-HTTP 3.01.01 No fix stated
gecko_platform 4.3.1.0 No fix stated
cesium_net 3.07.01 No fix stated
uc-http 3.01.01 No fix stated

Other CVEs of Gecko Platform

The 9 CVEs of Gecko Platform →
CVE-2023-39540 A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP… 5.9 Medium CVE-2023-39541 A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP… 5.9 Medium CVE-2023-45318 A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit… 10.0 Critical CVE-2023-24585 An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01 7.7 High
Track this CVE