PT-2023-8560 · Unknown · Weston Embedded Uc-Http

·

CVE-2023-31247

·

Published

2023-11-14

·

Updated

2023-11-17

CVSS v3.1

9.0

Critical

VectorAV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Weston Embedded uC-HTTP version 3.01.01
Description A memory corruption issue exists in the HTTP Server Host header parsing functionality. This can be triggered by a specially crafted network packet, potentially leading to code execution. An attacker can exploit this by sending a malicious packet.
Recommendations For Weston Embedded uC-HTTP version 3.01.01, update to a version that fixes the memory corruption vulnerability in the HTTP Server Host header parsing functionality. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-01167
CVE-2023-31247

Affected Products

Weston Embedded Uc-Http