Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted filename.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-06-29T08:00:00
Updated: 2024-08-05T17:41:55.528Z
Reserved: 2017-06-28T00:00:00
Link: CVE-2017-10671
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2017-06-29T08:29:00.217
Modified: 2024-07-19T13:05:10.600
Link: CVE-2017-10671
Redhat
No data.