CVE-2023-50965

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-50965
In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/starnight/MicroHttpServer/issues/5 Exploit Issue Tracking Mitigation Third Party Advisory
https://github.com/starnight/MicroHttpServer/tree/43985708ef5fe7677392c54e229bd22e136c2665 Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:starnight:micro_http_server:-:*:*:*:*:*:*:*
History

20 Dec 2023, 20:02

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8
References () https://github.com/starnight/MicroHttpServer/issues/5 - () https://github.com/starnight/MicroHttpServer/issues/5 - Exploit, Issue Tracking, Mitigation, Third Party Advisory
References () https://github.com/starnight/MicroHttpServer/tree/43985708ef5fe7677392c54e229bd22e136c2665 - () https://github.com/starnight/MicroHttpServer/tree/43985708ef5fe7677392c54e229bd22e136c2665 - Product
CPE cpe:2.3:a:starnight:micro_http_server:-:*:*:*:*:*:*:*
CWE CWE-787
First Time Starnight micro Http Server
Starnight
Summary
  • (es) En MicroHttpServer (también conocido como Micro HTTP Server) hasta 4398570, _ReadStaticFiles en lib/middleware.c permite un desbordamiento de búfer en la región stack de la memoria y una ejecución de código potencialmente remota a través de un URI largo.

17 Dec 2023, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-17 02:15

Updated : 2023-12-20 20:02

NVD link : CVE-2023-50965

Mitre link : CVE-2023-50965

CVE.ORG link : CVE-2023-50965

JSON object : View

Products Affected

starnight

  • micro_http_server
CWE
CWE-787

Out-of-bounds Write