CVE-2017-10671

Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash)…

published June 29, 2017

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted filename.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01525 · 74.3th percentile
Published
2017-06-29T08:00Z
EPSS history
Timeline
  • 29 JUN 08:00Z
    Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash)…
    cvelistv5