Skip to content
OpenAdvisories
Unscored CVE-2019-1010218 EUVD-2019-1960GHSA-6755-m48f-jwjv

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120. The impact i…

Published Jul 22, 2019 · Updated Aug 5, 2024 · Assigned by dwf

Description

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv[0] to an insane length with execl. The fixed version is: There's no fix yet.

Affected products

VendorProductAffectedFixed
Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) [fixed: There's no fix yet] —

References