Header Parsing Vulnerability in Embedthis GoAhead Web Server

CVE-2019-12822

What is CVE-2019-12822?

The Embedthis GoAhead web server is susceptible to a header parsing vulnerability that can result in a memory assertion failure and out-of-bounds memory reference. This issue, found in versions prior to 4.1.1 and 5.0.1, may be exploited to perform a Denial of Service (DoS) attack. A specific scenario can trigger this vulnerability, such as having a colon on a line by itself, which can disrupt normal operation and pose a risk to application availability. Users are advised to update to the latest versions to mitigate this risk.

References