Stack overflow

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request...

Design/Logic Flaw

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request...

CVE-2022-30477

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request...

CVE-2022-30476

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetFirewallCfg request...

CVE-2022-30476

The CVE-2022-30476 entry concerns the Tenda AC Series Router AC18_V15.03.05.19(6318), with a stack-based buffer overflow in the httpd module when processing /goform/SetFirewallCfg. The issue affects the httpd handling of that request, with CVSSv3.1 base score 9.8 (CRITICAL) and network attack vec...

CVE-2022-30475

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/WifiExtraSet request...

CVE-2022-30474

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request...

CVE-2022-30474

CVE-2022-30474 affects Tenda AC Series Router AC18_V15.03.05.19(6318). The heap overflow occurs in the httpd module when processing the /goform/saveParentControlInfo request. This is reported across multiple sources (NVD, Red Hat, CVE listings) with CVSS scores indicating high to critical impact ...

Tenda AC Series Router 缓冲区错误漏洞

The Tenda AC Series Router is a series of wireless routers from Tenda, a Chinese company. A security vulnerability exists in Tenda AC Series Router AC18V15.03.05.196318, which originates from a heap overflow in the httpd module when processing /goform/saveParentControlInfo requests...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-1730)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

Buffer overflow

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

CVE-2021-42659

CVE-2021-42659 affects Tenda AC9 devices (V1.0 V15.03.02.19(6318) and V3.0 V15.03.06.42_multi) where the httpd web server vulnerable to a buffer overflow during virtual service configuration. The httpd process crashes/exits when a super-long list parameter is provided. Root cause: buffer overflow...

subversion: Subversion's mod_dav_svn is vulnerable to memory corruption

A use-after-free vulnerability was found in Subversion in the moddavsvn Apache HTTP server HTTPd module. While looking up path-based authorization authz rules, multiple calls to the postconfig hook can invalidate cached pointers to object-pools, which Subversion subsequently uses. This issue...

Apache 2.4.x < 2.4.52 mod_lua Buffer Overflow

The version of Apache httpd installed on the remote host is prior to 2.4.52. It is, therefore, affected by a flaw related to modlua when handling multipart content. A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. The...

CVE-2022-30033

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

Buffer overflow

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

CVE-2022-30033

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

CVE-2022-30033

CVE-2022-30033 affects the Tenda TX9 Pro router (V22.03.02.10). The issue is a Buffer Overflow in the httpd module’s setIPv6Status() function, enabling remote exploitation over the network with no user interaction. CVSS: 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5). No exploitation or patch...

new packages: httpd

An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...