CVE-2017-1000471

2022-10-0316:23:10

mitre

www.cve.org

embedthis goahead webserver

version 4.0.0

null pointer dereference

cgi handler

memory corruption

denial of service

9.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.7%

JSON

EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in memory corruption or denial of service.

References

github.com/embedthis/goahead/commit/5e6be61e42448f503e75e287dc332b1ecbf2a665#diff-7c9c60c790648b06210f57b9e2f53ca7

github.com/embedthis/goahead/pull/258