CVE-2021-31227

An issue was discovered in HCC embedded InterNiche 4.0.1

published August 19, 2021

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that parses the HTTP POST request, due to an incorrect signed integer comparison. This vulnerability requires the attacker to send a malformed HTTP packet with a negative Content-Length, which bypasses the size checks and results in a large heap overflow in the wbs_multidata buffer copy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01675 · 76.7th percentile
Published
2021-08-19T10:50Z
EPSS history
Timeline
  • 19 AUG 10:50Z
    An issue was discovered in HCC embedded InterNiche 4.0.1
    cvelistv5