PT-2018-5237
CVE-2017-1000471
·
Published
2018-01-03
·
Updated
2018-01-17
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
EmbedThis GoAhead Webserver version 4.0.0
Description
The issue is related to a NULL pointer dereference in the CGI handler, which can result in memory corruption or denial of service.
Recommendations
For EmbedThis GoAhead Webserver version 4.0.0, consider disabling the CGI handler as a temporary workaround until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾