CVE-2019-19240

Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header

published November 22, 2019

CVSS
—
EPSS
2%
Percentile
74.7
In the wild
Unconfirmed
What it is

Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header. The GoAhead WebsRedirect uses a static host buffer that has a limited length and can overflow. This can cause a copy of the Host header to fail, leaving that buffer uninitialized, which may leak uninitialized data in a response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01541 · 74.7th percentile
Published
2019-11-22T18:46Z
EPSS history
Timeline
  • 22 NOV 18:46Z
    Embedthis GoAhead before 5.0.1 mishandles redirected HTTP requests with a large Host header
    cvelistv5