Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server via recursive parsing of JSON. Malicious code cannot be injected.
Advisories
Source ID Title
EUVD EUVD EUVD-2019-5222 Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server via recursive parsing of JSON. Malicious code cannot be injected.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-05T00:05:43.995Z

Reserved: 2019-07-18T00:00:00

Link: CVE-2019-13955

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-07-26T13:15:12.910

Modified: 2024-11-21T04:25:46.480

Link: CVE-2019-13955

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.