EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in memory corruption or denial of service.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HEmbedthis Goahead
APPEmbedthis4.0.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
Related vulnerabilities
CVE-2021-41615CRITICAL9.8ten sam produkt
websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the...
CVE-2021-43298CRITICAL9.8ten sam produkt
The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time m...
CVE-2021-42342CRITICAL9.8ten sam produkt
An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables ca...
CVE-2019-5096CRITICAL9.8ten sam produkt
An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within t...
CVE-2017-5674CRITICAL9.8ten sam produkt
A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP cam...