Integer Overflow Vulnerability in EmbedThis GoAhead Webserver
CVE-2017-1000470

7.5HIGH

Key Information:

Vendor

Embedthis

Status
Goahead Web Server
Vendor
CVE Published:
3 January 2018

What is CVE-2017-1000470?

The EmbedThis GoAhead Webserver is susceptible to an integer overflow vulnerability in its HTTP listener component. This issue arises when the server handles HTTP requests, leading to potential denial of service conditions. Versions 4.0.0 and earlier of GoAhead Webserver are affected. Users are advised to implement patches and review their configurations to mitigate this vulnerability. More detailed insights can be found in the project repository on GitHub.

References

https://github.com/embedthis/goahead/pull/258
x_refsource_MISC
https://github.com/embedthis/goahead/commit/adeb4abc6c998...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.