Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36464
HistoryJul 25, 2022 - 5:56 a.m.

Denial Of Service (DoS)

2022-07-2505:56:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
software
out-of-bounds read
rewrite function
maliciously crafted url

EPSS

0.001

Percentile

35.0%

github.com/caddyserver/caddy is vulnerable to denial of service. The vulnerability exists due to the out-of-bounds read in the Rewrite function of rewrite.go, allowing an attacker to crash the application by providing a maliciously crafted url.

EPSS

0.001

Percentile

35.0%