Crafted web server requests may cause a heap-based buffer... · CVE-2021-34583 · GitHub Advisory Database · GitHub

Crafted web server requests may cause a heap-based buffer...

High severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.

References

Published by the National Vulnerability Database

Oct 26, 2021

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 30, 2023

Weaknesses

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). Learn more on MITRE.

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer. Learn more on MITRE.