A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted network packet can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability.
Metrics
Affected Vendors & Products
References
History
Thu, 03 Oct 2024 14:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Silabs
Silabs gecko Platform Weston-embedded Weston-embedded uc-http |
|
CPEs | cpe:2.3:a:silabs:gecko_platform:*:*:*:*:*:*:*:* cpe:2.3:a:weston-embedded:uc-http:*:*:*:*:*:*:*:* |
|
Vendors & Products |
Silabs
Silabs gecko Platform Weston-embedded Weston-embedded uc-http |
|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2024-02-20T14:45:02.103Z
Updated: 2024-10-03T14:04:39.047Z
Reserved: 2023-10-06T20:58:14.631Z
Link: CVE-2023-45318
Vulnrichment
Updated: 2024-08-02T20:21:15.925Z
NVD
Status : Awaiting Analysis
Published: 2024-02-20T15:15:08.727
Modified: 2024-11-21T08:26:44.210
Link: CVE-2023-45318
Redhat
No data.