6083 matches found
Tenda AC Series Router Buffer Overflow Vulnerability (CNVD-2019-09140)
AC series is a router product launched by Tenda. A buffer overflow vulnerability exists in the web server httpd of Tenda AC Series routers, which can be exploited by an attacker to cause a denial of service...
Multiple Tenda products httpd buffer overflow vulnerability (CNVD-2018-22313)
Tenda AC7 and others are wireless router products from Tenda in China. httpd is one of the HTTP server components. A buffer overflow vulnerability exists in httpd in several Tenda products. An attacker could exploit this vulnerability to cause a denial of service overwrite the return address of a...
[SECURITY] Fedora 29 Update: mod_http2-1.11.1-1.fc29
The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers...
DEBIAN-CVE-2018-18778
ACME minihttpd before 1.30 lets remote users read arbitrary files...
CVE-2018-18732
An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'ntpServer' parameter for a post request,...
CVE-2018-18727
An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'deviceList' parameter for a post request,...
UBUNTU-CVE-2018-18778
ACME minihttpd before 1.30 lets remote users read arbitrary files...
Buffer overflow
An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...
Heap overflow
An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a heap-based buffer overflow vulnerability in the router's web server -- httpd. While processing the 'mac' parameter for a post...
Buffer overflow
An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the 'startIp' and 'endIp' parameters for a pos...
Multiple Tenda products httpd buffer overflow vulnerability (CNVD-2019-01884)
Tenda AC7 and others are wireless router products from Tenda in China. httpd is one of the HTTP server components. A buffer overflow vulnerability exists in httpd in several Tenda products, which can be exploited by an attacker to cause a denial of service overwrite the return address of a functi...
CVE-2018-18729
Affected devices are Tenda routers AC7 (V15.03.06.44_CN), AC9 (V15.03.05.19(6318)_CN), AC10 (V15.03.06.23_CN), AC15 (V15.03.05.19_CN), and AC18 (V15.03.05.19(6318)_CN). The issue is a heap-based buffer overflow in the router web server (httpd). During processing of the mac parameter for a POST re...
CVE-2018-18732
The CVE-2018-18732 issue affects Tenda AC7 (V15.03.06.44_CN), AC9 (V15.03.05.19(6318)_CN), AC10 (V15.03.06.23_CN), AC15 (V15.03.05.19_CN), and AC18 (V15.03.05.19(6318)_CN) devices. A buffer overflow exists in the router web server (httpd) triggered while processing the ntpServer parameter in a PO...
CVE-2018-18731
CVE-2018-18731 affects Tenda AC7/AC9/AC10/AC15/AC18 devices (versions listed in initial documents) where a buffer overflow exists in the router’s httpd web server. During processing of the POST parameter 'deviceMac', the value is used directly in sprintf to a stack variable, which can override th...
CVE-2018-18709
CVE-2018-18709 affects Tenda AC7 (V15.03.06.44_CN), AC9 (V15.03.05.19(6318)_CN), AC10 (V15.03.06.23_CN), AC15 (V15.03.05.19_CN), and AC18 (V15.03.05.19(6318)_CN) devices. The issue is a buffer overflow in the router’s web server (httpd): during processing of the POST parameter firewallEn, the val...
CVE-2018-18708
An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...
CVE-2018-18708
The CVE-2018-18708 vulnerability affects Tenda routers (AC7, AC9, AC10, AC15, AC18 with CN firmware). It is a buffer overflow in the httpd web server triggered by the page parameter in fromAddressNat during a POST request, where the value is passed to sprintf into a stack local variable, potentia...
[SECURITY] Fedora 27 Update: mod_http2-1.11.1-1.fc27
The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers...
Apache Httpd < 2.4.38 : DoS for HTTP/2 connections via slow request bodies
By sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol...