漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Off-by-one error in src/http.c in CoreHTTP 0.5.3.1 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via an HTTP request with a long first line that triggers a buffer overflow. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2007-4060.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CoreHTTP 'src/http.c'单字节溢出溢出漏洞
Vulnerability Description
CoreHTTP是一款小型的Web服务器。 CoreHTTP没有对HTTP请求执行充分的输入验证，在src/http.c文件45和46行的sscanf()调用可能触发单字节溢出： 45: sscanf(parentsprock->buffer, 46: "%" PATHSIZE_S "[A-Za-z] %" PATHSIZE_S "s%*[ \t\n]", req, url); req和url缓冲区所声明的大小为256字节(PATHSIZE)，但sscanf()调用可向这些缓冲区写入256字节(PATHS
CVSS Information
N/A
Vulnerability Type
N/A