Skip to content
OpenAdvisories

Package · Debian

civetweb

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompression

    CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the read_websocket() function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USE_ZLIB and MG_EXPERIMENTAL_IN…