5988 matches found
CVE-2018-18708
An issue was discovered on Tenda AC7 V15.03.06.44CN, AC9 V15.03.05.196318CN, AC10 V15.03.06.23CN, AC15 V15.03.05.19CN, and AC18 V15.03.05.196318CN devices. It is a buffer overflow vulnerability in the router's web server -- httpd. When processing the "page" parameter of the function...
CVE-2018-18708
The CVE-2018-18708 vulnerability affects Tenda routers (AC7, AC9, AC10, AC15, AC18 with CN firmware). It is a buffer overflow in the httpd web server triggered by the page parameter in fromAddressNat during a POST request, where the value is passed to sprintf into a stack local variable, potentia...
[SECURITY] Fedora 27 Update: mod_http2-1.11.1-1.fc27
The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers...
Apache Httpd < 2.4.38 : DoS for HTTP/2 connections via slow request bodies
By sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol...
[SECURITY] Fedora 28 Update: mod_http2-1.11.1-1.fc28
The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers...
ADB Epicentro Buffer Overflow Vulnerability (CNVD-2018-20873 )
ADB Epicentro is a set of firmware used in ADB gateway and router devices from ADB Switzerland. httpd is one of the HTTP servers. A buffer overflow vulnerability exists in httpd in ADB Epicentro version E7.3.2+. A remote attacker could exploit this vulnerability to execute code with the help of a...
CVE-2018-7631
Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without authentication...
CVE-2018-7632
Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL...
CVE-2018-7631
Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to execute code remotely via a specially crafted GET request without a leading "/" and without authentication...
CVE-2018-7632
Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL...
Buffer overflow
Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL...
CVE-2018-7632
CVE-2018-7632 concerns the httpd component of EpiCentro firmware (E_7.3.2+). The vulnerability is a buffer overflow triggered by a remote attacker sending a specially crafted GET request whose URL begins with a leading â/â. The consequence documented is a denial of service. Exploitation details, ...
CVE-2018-7631
CVE-2018-7631 involves a buffer overflow in the httpd component of EpiCentro firmware (E_7.3.2+) that allows remote code execution via a specially crafted GET request lacking a leading '/' and without authentication. Multiple connected sources corroborate the issue, describing an RCE risk tied to...
CVE-2018-7632
Buffer Overflow in httpd in EpiCentro E7.3.2+ allows attackers to cause a denial of service attack remotely via a specially crafted GET request with a leading "/" in the URL...
After importing a certificate PEM file with more than one CERTIFICATE section, you cannot access the management console
You have a PEM file which contains a PRIVATE KEY section, and more than one CERTIFICATE section. The additional CERTIFICATE sections are for other root certificate authorities. In the Management Console, you go to Settings and Configuration, and upload the certificate. Once that completes, the...
Photon OS 2.0: Httpd PHSA-2018-2.0-0089 (deprecated)
An update of 'httpd' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0089. The text itself is copyright C VMware, Inc...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2018-1.0-0181
An update of 'httpd' packages of Photon OS has been released...
Important Photon OS Security Update - PHSA-2018-0181
Updates of 'httpd' packages of Photon OS have been released...