CVE-2017-10671 Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impac...
HighCVSS 7.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted filename.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sthttpd project sthttpd | < 2.27.1 | 2.27.1 |
References
- www.openwall.com mailing-list patch third-party-advisory
- github.com issue-tracking patch third-party-advisory
- github.com issue-tracking patch third-party-advisory