CVE-2016-9564 Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters.
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| boa | = 0.92r | No fix listed |
References
- www.ljcusack.io exploit technical-description url-repurposed
- 94599 vdb-entry