CVE-2015-1548

mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which…

published February 10, 2015

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01600 · 75.4th percentile
Published
2015-02-10T19:00Z
EPSS history
Timeline
  • 10 FEB 19:00Z
    mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which…
    cvelistv5