CVE-2022-30474: Out-of-bounds Write

Tenda AC Series Router AC18V15.03.05.196318 was discovered to contain a heap overflow in the httpd module when handling /goform/saveParentControlInfo request...

Tenda AC Series Router 缓冲区错误漏洞

The Tenda AC Series Router is a series of wireless routers from Tenda, a Chinese company. A security vulnerability exists in Tenda AC Series Router AC18V15.03.05.196318, which originates from a heap overflow in the httpd module when processing /goform/saveParentControlInfo requests...

Huawei EulerOS: Security Advisory for httpd (EulerOS-SA-2022-1730)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

CVE-2021-42659

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

Buffer overflow

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

CVE-2021-42659

CVE-2021-42659 affects Tenda AC9 devices (V1.0 V15.03.02.19(6318) and V3.0 V15.03.06.42_multi) where the httpd web server vulnerable to a buffer overflow during virtual service configuration. The httpd process crashes/exits when a super-long list parameter is provided. Root cause: buffer overflow...

subversion: Subversion's mod_dav_svn is vulnerable to memory corruption

A use-after-free vulnerability was found in Subversion in the moddavsvn Apache HTTP server HTTPd module. While looking up path-based authorization authz rules, multiple calls to the postconfig hook can invalidate cached pointers to object-pools, which Subversion subsequently uses. This issue...

PT-2022-11658

Name of the Vulnerable Software and Affected Versions Tenda AC9 V1.0 V15.03.02.196318 Tenda AC9 V3.0 V15.03.06.42 multi Description There is a buffer overflow issue in the Web server httpd of Tenda router devices. This occurs when setting the virtual service and a super-long list parameter is...

CVE-2021-42659: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.196318 and Tenda AC9 V3.0 V15.03.06.42multi. When setting the virtual service, the httpd program will crash and exit when the super-long list parameter occurs...

Apache 2.4.x < 2.4.52 mod_lua Buffer Overflow

The version of Apache httpd installed on the remote host is prior to 2.4.52. It is, therefore, affected by a flaw related to modlua when handling multipart content. A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. The...

CVE-2022-30033

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

Buffer overflow

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

CVE-2022-30033

CVE-2022-30033 affects the Tenda TX9 Pro router (V22.03.02.10). The issue is a Buffer Overflow in the httpd module’s setIPv6Status() function, enabling remote exploitation over the network with no user interaction. CVSS: 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5). No exploitation or patch...

CVE-2022-30033

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

CVE-2022-30033: Buffer Copy without Checking Size of Input

Tenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status in httpd module...

PT-2022-19978

Name of the Vulnerable Software and Affected Versions Tenda TX9 Pro version V22.03.02.10 Description The issue is related to a Buffer Overflow that can occur via the setIPv6Status function in the httpd module. This can be exploited through the httpd module, but specific API endpoints or vulnerabl...

new packages: httpd

An update is available for httpd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

httpd:2.4 security and bug fix update

modhttp2 1.15.7-5 - Resolves: 2035030 - CVE-2021-44224 httpd:2.4/httpd: possible NULL dereference or SSRF in forward proxy configurations 1.15.7-4 - Resolves: 1966728 - CVE-2021-33193 httpd:2.4/modhttp2: httpd: Request splitting via HTTP/2 method injection and modproxy modmd...

InHand Networks InRouter302缓冲区溢出漏洞

InHand Networks InRouter Series is a series of routers from InHand Networks, U.S.A. A buffer overflow vulnerability exists in InHand Networks InRouter302 version V3.5.4, which stems from the httpd parsepingresult API function A boundary error occurs when handling untrusted input, which can be...