Lucene search
+L

5 matches found

osv_debian
osv_debian
•added 2026/07/30 9:17 p.m.•20 views

DEBIAN-CVE-2026-55777

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS5.9AI score0.00445EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/30 8:37 p.m.•54 views

CVE-2026-55777

GoAccess (real-time web log analyzer/viewer) is affected by an out-of-bounds heap read in the parse_ios() function prior to version 1.11. A crafted User-Agent in a processed access log can cause memmove to use an attacker-controlled offset as both source offset and copy length, allowing reading u...

5.3CVSS5.9AI score0.00445EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/30 8:37 p.m.•55 views

CVE-2026-55777 GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoS

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS0.00445EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/07/30 8:37 p.m.•17 views

CVE-2026-55777 GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoS

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS5.4AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/30 8:37 p.m.•19 views

CVE-2026-55777 GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoS

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to 1.11, the parseios function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent...

5.3CVSS5.9AI score0.00445EPSS
SaveExploits0References2
Rows per page
Query Builder