Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/30 9:17 p.m.7 views

DEBIAN-CVE-2026-55777

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS5.4AI score0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/30 8:37 p.m.10 views

CVE-2026-55777 GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoS

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS5.4AI score0.00263EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/30 8:37 p.m.29 views

CVE-2026-55777

GoAccess (real-time web log analyzer/viewer) is affected by an out-of-bounds heap read in the parse_ios() function prior to version 1.11. A crafted User-Agent in a processed access log can cause memmove to use an attacker-controlled offset as both source offset and copy length, allowing reading u...

5.3CVSS5.8AI score0.00263EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/30 8:37 p.m.7 views

CVE-2026-55777 GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoS

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS5.4AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/30 8:37 p.m.39 views

CVE-2026-55777 GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoS

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS0.00263EPSS
SaveExploits0References2
Rows per page
Query Builder