High · 8.6 CVE-2024-34199 EUVD-2024-34679GHSA-wx4f-9wf4-26p4

TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sending excessively larg…

Published May 10, 2024 · Updated Jan 5, 2026 · Assigned by mitre

Description

TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sending excessively large elements in the request line.

References

https://github.com/DMCERTCE/PoC_Tiny_Overflow
https://github.com/maximmasiutin/TinyWeb/commit/d49c3da
https://github.com/maximmasiutin/TinyWeb/commit/2584082