In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.
References
Link | Resource |
---|---|
https://github.com/cherokee/webserver/issues/1221 | Exploit Third Party Advisory |
https://github.com/cherokee/webserver/issues/1222 | Exploit Third Party Advisory |
https://github.com/cherokee/webserver/issues/1225 | Exploit Third Party Advisory |
https://github.com/cherokee/webserver/issues/1226 | Exploit Third Party Advisory |
https://logicaltrust.net/blog/2019/11/cherokee.html | Exploit Third Party Advisory |
https://security.gentoo.org/glsa/202012-09 | Third Party Advisory |
https://github.com/cherokee/webserver/issues/1221 | Exploit Third Party Advisory |
https://github.com/cherokee/webserver/issues/1222 | Exploit Third Party Advisory |
https://github.com/cherokee/webserver/issues/1225 | Exploit Third Party Advisory |
https://github.com/cherokee/webserver/issues/1226 | Exploit Third Party Advisory |
https://logicaltrust.net/blog/2019/11/cherokee.html | Exploit Third Party Advisory |
https://security.gentoo.org/glsa/202012-09 | Third Party Advisory |
Configurations
History
21 Nov 2024, 04:39
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/cherokee/webserver/issues/1221 - Exploit, Third Party Advisory | |
References | () https://github.com/cherokee/webserver/issues/1222 - Exploit, Third Party Advisory | |
References | () https://github.com/cherokee/webserver/issues/1225 - Exploit, Third Party Advisory | |
References | () https://github.com/cherokee/webserver/issues/1226 - Exploit, Third Party Advisory | |
References | () https://logicaltrust.net/blog/2019/11/cherokee.html - Exploit, Third Party Advisory | |
References | () https://security.gentoo.org/glsa/202012-09 - Third Party Advisory |
Information
Published : 2020-05-18 00:15
Updated : 2024-11-21 04:39
NVD link : CVE-2019-20799
Mitre link : CVE-2019-20799
CVE.ORG link : CVE-2019-20799
JSON object : View
Products Affected
cherokee-project
- cherokee
CWE
CWE-787
Out-of-bounds Write