CVE-2017-14149 - Vulnerability Details

Vendors	Products
Embedthis	Goahead

Link	Providers
https://github.com/shadow4u/goaheaddebug/blob/master/README.md

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a \"POST / HTTP/1.1\" request."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-09-05T07:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/shadow4u/goaheaddebug/blob/master/README.md"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2017-14149", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a \"POST / HTTP/1.1\" request."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/shadow4u/goaheaddebug/blob/master/README.md", "refsource": "MISC", "url": "https://github.com/shadow4u/goaheaddebug/blob/master/README.md"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T19:20:41.283Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/shadow4u/goaheaddebug/blob/master/README.md"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2017-14149", "datePublished": "2017-09-05T07:00:00Z", "dateReserved": "2017-09-05T00:00:00Z", "dateUpdated": "2024-09-16T18:55:35.449Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-09-05T07:00:00Z (string)

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://github.com/shadow4u/goaheaddebug/blob/master/README.md (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : cve@mitre.org (string)

ID : CVE-2017-14149 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://github.com/shadow4u/goaheaddebug/blob/master/README.md (string)

refsource : MISC (string)

url : https://github.com/shadow4u/goaheaddebug/blob/master/README.md (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T19:20:41.283Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://github.com/shadow4u/goaheaddebug/blob/master/README.md (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

cveId : CVE-2017-14149 (string)

datePublished : 2017-09-05T07:00:00Z (string)

dateReserved : 2017-09-05T00:00:00Z (string)

dateUpdated : 2024-09-16T18:55:35.449Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:embedthis:goahead:3.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "26DE3222-0FA8-49DE-8E94-AB3BC8816F9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "60001CE1-A452-49B4-9C27-D892B91078F0", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "FCE3F237-3B0B-40B5-A3E3-E468883D6DFE", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "6CAEAA94-A8FB-4D32-9D8A-E06F2F548FD7", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "83B7280F-4FBF-4451-BAAF-E90068CDAB9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "F168E900-DFA1-4D9C-AD08-9A1B876C6DDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "78418AE8-D5B3-4771-BFFD-DC28BBC42B1F", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "BF3BB240-A988-497F-82CE-F99C8438F0B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "14B89AAB-1CBF-4862-A7AC-9DDEF026646D", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "05918B61-7E62-40BA-9EF3-FB4DD2EC3BF1", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "CDD5EE6D-A498-4C35-81F7-684E30845E44", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.11:*:*:*:*:*:*:*", "matchCriteriaId": "801889A1-C61C-4CC9-8B2A-46CF4E246978", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.4.12:*:*:*:*:*:*:*", "matchCriteriaId": "0AF17ED0-EFA5-407E-9CCC-15543C2D194C", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "BACEEDBF-0C89-46E7-9A00-9C4BD61DAE7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "7A7EE03C-294B-485E-9CA4-5E0714A2939C", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "D8EBF002-17C3-4AD5-BDC3-B7643BEA5173", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "34B4E67D-5883-43A5-85B2-1E8D8D157F54", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "ACF0D5BD-F1C0-4DA0-9BC2-AE8DA03F2204", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "9F2A0A7F-8516-4405-A8C8-B862E59DEAC2", "vulnerable": true}, {"criteria": "cpe:2.3:a:embedthis:goahead:3.6.5:*:*:*:*:*:*:*", "matchCriteriaId": "81A1B366-C737-43F7-A391-C28C434026C9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a \"POST / HTTP/1.1\" request."}, {"lang": "es", "value": "GoAhead en versiones de la 3.4.0 a la 3.6.5 presenta una desreferencia de puntero NULL en la funci\u00f3n websDecodeUrl en http.c, lo que da lugar a un bloqueo en una petici\u00f3n \"POST / HTTP/1.1\"."}], "id": "CVE-2017-14149", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-09-05T07:29:00.273", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/shadow4u/goaheaddebug/blob/master/README.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/shadow4u/goaheaddebug/blob/master/README.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 26DE3222-0FA8-49DE-8E94-AB3BC8816F9B (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 60001CE1-A452-49B4-9C27-D892B91078F0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.2:*:*:*:*:*:*:* (string)

matchCriteriaId : FCE3F237-3B0B-40B5-A3E3-E468883D6DFE (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.3:*:*:*:*:*:*:* (string)

matchCriteriaId : 6CAEAA94-A8FB-4D32-9D8A-E06F2F548FD7 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 83B7280F-4FBF-4451-BAAF-E90068CDAB9B (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.5:*:*:*:*:*:*:* (string)

matchCriteriaId : F168E900-DFA1-4D9C-AD08-9A1B876C6DDC (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 78418AE8-D5B3-4771-BFFD-DC28BBC42B1F (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.7:*:*:*:*:*:*:* (string)

matchCriteriaId : BF3BB240-A988-497F-82CE-F99C8438F0B1 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.8:*:*:*:*:*:*:* (string)

matchCriteriaId : 14B89AAB-1CBF-4862-A7AC-9DDEF026646D (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.9:*:*:*:*:*:*:* (string)

matchCriteriaId : 05918B61-7E62-40BA-9EF3-FB4DD2EC3BF1 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.10:*:*:*:*:*:*:* (string)

matchCriteriaId : CDD5EE6D-A498-4C35-81F7-684E30845E44 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.11:*:*:*:*:*:*:* (string)

matchCriteriaId : 801889A1-C61C-4CC9-8B2A-46CF4E246978 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.4.12:*:*:*:*:*:*:* (string)

matchCriteriaId : 0AF17ED0-EFA5-407E-9CCC-15543C2D194C (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : BACEEDBF-0C89-46E7-9A00-9C4BD61DAE7E (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.6.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7A7EE03C-294B-485E-9CA4-5E0714A2939C (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.6.1:*:*:*:*:*:*:* (string)

matchCriteriaId : D8EBF002-17C3-4AD5-BDC3-B7643BEA5173 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.6.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 34B4E67D-5883-43A5-85B2-1E8D8D157F54 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.6.3:*:*:*:*:*:*:* (string)

matchCriteriaId : ACF0D5BD-F1C0-4DA0-9BC2-AE8DA03F2204 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.6.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 9F2A0A7F-8516-4405-A8C8-B862E59DEAC2 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:embedthis:goahead:3.6.5:*:*:*:*:*:*:* (string)

matchCriteriaId : 81A1B366-C737-43F7-A391-C28C434026C9 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http.c, leading to a crash for a "POST / HTTP/1.1" request. (string)

}

1 : { »

lang : es (string)

value : GoAhead en versiones de la 3.4.0 a la 3.6.5 presenta una desreferencia de puntero NULL en la función websDecodeUrl en http.c, lo que da lugar a un bloqueo en una petición "POST / HTTP/1.1". (string)

}

]

id : CVE-2017-14149 (string)

lastModified : 2025-04-20T01:37:25.860 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2017-09-05T07:29:00.273 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://github.com/shadow4u/goaheaddebug/blob/master/README.md (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Exploit (string)

1 : Third Party Advisory (string)

]

url : https://github.com/shadow4u/goaheaddebug/blob/master/README.md (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-476 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object