6962 matches found
Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-2291)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-39275. ap_escape_quotes buffer overflow
Security Advisory ID : BSA-2022-1599 Component : Apache httpd Revision : 1.1 An out-of-bounds write in function apescapequotes of httpd allows an unauthenticated, remote attacker to crash the server or potentially execute code on the system with the privileges of the httpd user, by providing...
CVE-2022-36586
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary...
CVE-2022-36586
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary...
Buffer overflow
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary...
RHEL 7 : httpd24-httpd (RHSA-2022:0303)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0303 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modlua: Possible buffer...
RHEL 8 : httpd:2.4 (RHSA-2022:0288)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0288 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modlua: Possible buffer...
CVE-2022-36586
CVE-2022-36586 affects Tenda G3 firmware US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, where a buffer overflow is caused by strcpy in the httpd binary (function 0x869f4). The vulnerability arises from improper input handling in that component, with the NVD entry rating CVSS v3.1 base score 9.8 (CRITICAL) ...
CVE-2022-36586
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary...
CVE-2022-36585
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf...
CVE-2022-36585
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf...
Buffer overflow
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf...
CVE-2022-36585
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf...
CVE-2022-36585
In Tenda G3 firmware US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, the httpd binary contains a buffer overflow in the addDhcpRule function triggered by sscanf. This vulnerable component could allow overflow-related impact as described in CVE-2022-36585. APT sources note a temporary mitigation: disable the...
CVE-2022-36587
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary...
CVE-2022-36587
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary...
Buffer overflow
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary...
CVE-2022-36587
In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary...
CVE-2022-36587
CVE-2022-36587 affects Tenda G3 firmware (US_G3V3.0br_V15.11.0.6(7663)_EN_TDE). The vulnerability is a buffer overflow caused by sprintf in the httpd binary. Exploitation would impact confidentiality, integrity, and availability, with network access and no user interaction required per the CVSS m...