Lucene search
HistoryJan 05, 2024 - 4:15 a.m.
CVE-2024-22087
pico http server
stack-based buffer overflow
long uri
remote code execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.002
Percentile
54.5%
route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution.
Affected configurations
Node
alekseykurepinpico_http_server_in_cRange≤2021-04-02
| Vendor | Product | Version | CPE |
|---|---|---|---|
| alekseykurepin | pico_http_server_in_c | * | cpe:2.3:a:alekseykurepin:pico_http_server_in_c:*:*:*:*:*:*:*:* |
References
Related
cve
cve
CVE-2024-22087
2024-01-05 04:15:07
prion
prion
Stack overflow
2024-01-05 04:15:00
cvelist
cvelist
CVE-2024-22087
2024-01-05 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.9
Confidence
High
EPSS
0.002
Percentile
54.5%
Related for NVD:CVE-2024-22087