Lucene search

[email protected]CVE-2023-50965

HistoryDec 17, 2023 - 2:15 a.m.

CVE-2023-50965

2023-12-1702:15:21

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-50965

microhttpserver

micro http server

buffer overflow

remote code execution

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.1%

JSON

In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI.

Affected configurations

NVD

Node

starnightmicro_http_serverMatch-

CPENameOperatorVersion
starnight:micro_http_serverstarnight micro http servereq-

CPE	Name	Operator	Version
starnight:micro_http_server	starnight micro http server	eq	-

References

github.com/starnight/MicroHttpServer/issues/5

github.com/starnight/MicroHttpServer/tree/43985708ef5fe7677392c54e229bd22e136c2665

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.1%

JSON

Related for CVE-2023-50965

prion1 cvelist1 nvd1