Buffer Overflow Vulnerability in Brother Network Services

CVE-2024-51979

What is CVE-2024-51979?

An authenticated attacker can exploit a buffer overflow vulnerability in Brother network services. This is triggered by sending a malformed request containing empty Origin and improperly formatted Referer headers to the HTTP (port 80), HTTPS (port 443), or IPP (port 631) services. Specifically, if the host value within the Referer header exceeds 64 bytes, it may result in a stack-based buffer overflow, potentially allowing the attacker to execute arbitrary code or cause a denial of service.

References