CVE-2018-18707: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "ssid" parameter for a post request, the value...

CVE-2018-18706: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...

PT-2018-14586

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

PT-2018-14585

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

PT-2018-14584

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

PT-2018-14587

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 CN Tenda AC9 version 15.03.05.196318 CN Tenda AC10 version 15.03.06.23 CN Tenda AC15 version 15.03.05.19 CN Tenda AC18 version 15.03.05.196318 CN Description A buffer overflow issue exists in the router's web...

CVE-2018-18708: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...

[SECURITY] Fedora 27 Update: mod_http2-1.11.1-1.fc27

The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers...

Apache Httpd < 2.4.38 : DoS for HTTP/2 connections via slow request bodies

By sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol...

[SECURITY] Fedora 28 Update: mod_http2-1.11.1-1.fc28

The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers...

ADB Epicentro Buffer Overflow Vulnerability (CNVD-2018-20873 )

ADB Epicentro is a set of firmware used in ADB gateway and router devices from ADB Switzerland. httpd is one of the HTTP servers. A buffer overflow vulnerability exists in httpd in ADB Epicentro version E7.3.2+. A remote attacker could exploit this vulnerability to execute code with the help of a...

CVE-2018-7631

Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without authentication...

CVE-2018-7632

Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL...

CVE-2018-7631

Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without authentication...

CVE-2018-7632

Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL...

Buffer overflow

Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL...

CVE-2018-7632

Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL...

CVE-2018-7632

CVE-2018-7632 concerns the httpd component of EpiCentro firmware (E_7.3.2+). The vulnerability is a buffer overflow triggered by a remote attacker sending a specially crafted GET request whose URL begins with a leading ‘/’. The consequence documented is a denial of service. Exploitation details, ...

CVE-2018-7631

CVE-2018-7631 involves a buffer overflow in the httpd component of EpiCentro firmware (E_7.3.2+) that allows remote code execution via a specially crafted GET request lacking a leading '/' and without authentication. Multiple connected sources corroborate the issue, describing an RCE risk tied to...

PT-2018-18170

Name of the Vulnerable Software and Affected Versions EpiCentro version E 7.3.2 and later Description The issue allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without authentication. This can be achieved by sending a malicious request to th...