JVN#93226941: H2O vulnerable to buffer overflow

H2O is open source web server software. H2O contains a buffer overflow vulnerability (CWE-119) due to a processing flaw in the output of Access Log.

Impact

A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• H2O version 2.2.4 and earlier