CVE-2017-14149

GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request

published September 5, 2017

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05794 · 93.1th percentile
Published
2017-09-05T07:00Z
EPSS history
Timeline
  • 05 SEP 07:00Z
    GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request
    cvelistv5