Aller au contenu
Se connecter
9.0 Critique

CVE-2023-31247 A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP…

Description

A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
Gecko Platform 4.3.1.0 Pas de correctif indiqué
Cesium NET 3.07.01 Pas de correctif indiqué
uC-HTTP 3.01.01 Pas de correctif indiqué

Autres CVE de Gecko Platform

Les 9 CVE de Gecko Platform →
CVE-2023-39540 A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP… 5.9 Moyenne CVE-2023-39541 A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP… 5.9 Moyenne CVE-2023-45318 A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit… 10.0 Critique CVE-2023-24585 An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01 7.7 Élevée
Suivre cette CVE