Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mishandled.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lotos WebServer 安全漏洞
Vulnerability Description
Lotos WebServer是一个小型但高性能的 HTTP WebServer，遵循 Reactor 模型，使用非阻塞 IO 和 IO 复用（epoll ET）来处理并发。 Lotos WebServer 0.1.1及之前版本存在安全漏洞，该漏洞源于 realloc 处理不当， buffer.h 中的 buffer_avail() 函数中包含释放后重用，可能会导致未定义的行为、拒绝服务或绕过身份验证。
CVSS Information
N/A
Vulnerability Type
N/A