Null pointer dereference

2018-08-1803:29:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.2%

JSON

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11.

CPENameOperatorVersion
appweblt7.0.2
goaheadlt4.0.1
junoseq12.1x46 d60
junoseq12.1x46 d30
junoseq12.1x46 d45
junoseq12.1x46 d50
junoseq12.1x46 d65
junoseq12.1x46 d35
junoseq12.1x46 d25
junoseq12.1x46 d20

Name	Operator	Version
appweb	lt	7.0.2
goahead	lt	4.0.1
junos	eq	12.1x46 d60
junos	eq	12.1x46 d30
junos	eq	12.1x46 d45
junos	eq	12.1x46 d50
junos	eq	12.1x46 d65
junos	eq	12.1x46 d35
junos	eq	12.1x46 d25
junos	eq	12.1x46 d20

Rows per page:

1-10 of 3261

References

github.com/embedthis/appweb/commit/66067ae6d1fa08b37a270e7dc1821df52ed2daef

github.com/embedthis/appweb/issues/605

github.com/embedthis/goahead/issues/264

supportportal.juniper.net/s/article/2019-07-Security-Bulletin-Junos-OS-J-Web-Denial-of-Service-due-to-multiple-vulnerabilities-in-Embedthis-Appweb-Server

supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved