Null pointer dereference

2020-07-1314:15:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

86.9%

JSON

Appweb before 7.2.2 and 8.x before 8.1.0, when built with CGI support, mishandles an HTTP request with a Range header that lacks an exact range. This may result in a NULL pointer dereference and cause a denial of service.

CPENameOperatorVersion
appwebge8.0.0
appweblt8.1.0
appweblt7.2.2

Name	Operator	Version
appweb	ge	8.0.0
appweb	lt	8.1.0
appweb	lt	7.2.2

References

github.com/embedthis/appweb-gpl/issues/2