Lucene search
HistoryJan 05, 2024 - 4:15 a.m.
CVE-2024-22087
buffer overflow
remote code execution
cve-2024-22087
pico http server
c
f3b69a6
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
54.7%
route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution.
Affected configurations
Node
alekseykurepinpico_http_server_in_cRange≤2021-04-02
| CPE | Name | Operator | Version |
|---|---|---|---|
| alekseykurepin:pico_http_server_in_c | alekseykurepin pico http server in c | le | 2021-04-02 |
References
Social References
More
Related
nvd
nvd
CVE-2024-22087
2024-01-05 04:15:07
cvelist
cvelist
CVE-2024-22087
2024-01-05 00:00:00
prion
prion
Stack overflow
2024-01-05 04:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
54.7%
Related for CVE-2024-22087