USN-4848-1 — mini-httpd vulnerability

Summary

It was discovered that ACME mini_httpd did not properly handle HTTP GET
requests with empty headers. A remote attacker could use this vulnerability
to read arbitrary files.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	mini-httpd	1.19-9.3ubuntu0.1~esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	mini-httpd	1.23-1ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	mini-httpd	1.23-1.2ubuntu0.1~esm1

Vulnerabilities 1

Unscored —

CVE-2018-18778 Public exploit Scanner template EPSS 71%

ACME mini_httpd before 1.30 lets remote users read arbitrary files.

mini-httpd mini-httpd mini_httpd Debian Ubuntu Alpine

Oct 29, 2018

References

report
https://ubuntu.com/security/CVE-2018-18778

mini-httpd vulnerability

Summary

Fixed packages 3

Vulnerabilities 1

ACME mini_httpd before 1.30 lets remote users read arbitrary files.

References