Lucene search

PRIOn knowledge basePRION:CVE-2018-15505

HistoryAug 18, 2018 - 3:29 a.m.

Null pointer dereference

2018-08-1803:29:00

PRIOn knowledge base

www.prio-n.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

67.3%

JSON

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted “Host” header field may cause a NULL pointer dereference and thus cause a denial of service, as demonstrated by the lack of a trailing ‘]’ character in an IPv6 address.

CPENameOperatorVersion
appweblt7.0.2
goaheadlt4.0.1
junoseq15.1 r7
junoseq16.1 r
junoseq12.3 r11
junoseq15.1x53 d47
junoseq15.1x53 d10
junoseq15.1 f1
junoseq15.1x53 d40
junoseq15.1

Name	Operator	Version
appweb	lt	7.0.2
goahead	lt	4.0.1
junos	eq	15.1 r7
junos	eq	16.1 r
junos	eq	12.3 r11
junos	eq	15.1x53 d47
junos	eq	15.1x53 d10
junos	eq	15.1 f1
junos	eq	15.1x53 d40
junos	eq	15.1

Rows per page:

1-10 of 2251

References

github.com/embedthis/appweb/commit/16e6979c82297d5fc4f8661e7ada975f51e4dfa9

github.com/embedthis/appweb/issues/605

github.com/embedthis/goahead/issues/264

supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved?language=en_US

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.003 Low

EPSS

Percentile

67.3%

JSON

Related for PRION:CVE-2018-15505