CVE-2019-1010218CWE-120

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120

published July 22, 2019

CVSS
—
EPSS
1%
Percentile
71.1
In the wild
Unconfirmed
What it is

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv[0] to an insane length with execl. The fixed version is: There's no fix yet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01341 · 71.1th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2019-07-22T17:30Z
EPSS history
Timeline
  • 22 JUL 17:30Z
    Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120
    cvelistv5