Lucene search

MitreCVE-2017-1000470

HistoryJan 03, 2018 - 8:29 p.m.

CVE-2017-1000470

2018-01-0320:29:00

CWE-190

mitre

web.nvd.nist.gov

cve-2017-1000470

embedthis

goahead webserver

integer overflow

http listener

denial of service

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.6%

JSON

EmbedThis GoAhead Webserver versions 4.0.0 and earlier is vulnerable to an integer overflow in the HTTP listener resulting in denial of service.

Affected configurations

Nvd

Node

embedthisgoahead_web_serverMatch4.0.0

VendorProductVersionCPE
embedthisgoahead_web_server4.0.0cpe:2.3:a:embedthis:goahead_web_server:4.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
embedthis	goahead_web_server	4.0.0	cpe:2.3:a:embedthis:goahead_web_server:4.0.0:::::::*

References

github.com/embedthis/goahead/commit/adeb4abc6c998c19524e09fde20c02b4a26765a3

github.com/embedthis/goahead/pull/258

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.6%

JSON

Related for CVE-2017-1000470