漏洞标题
Eclipse ThreadX NetX Duo HTTP 服务器拒绝服务漏洞
漏洞描述信息
在Eclipse ThreadX NetX Duo 6.4.2版本之前的功能中,NetX HTTP服务器存在一个漏洞。攻击者可以通过精心构造的数据包导致拒绝服务。其核心问题是,在出现错误条件时没有关闭文件,从而导致后续每次文件请求都会出现404错误。用户可以通过禁用PUT请求支持来规避该问题。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
漏洞类别
对异常条件的处理不恰当
漏洞标题
Eclipse ThreadX NetX Duo HTTP server denial of service
漏洞描述信息
In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before
version 6.4.2, an attacker can cause a denial of service by specially
crafted packets. The core issue is missing closing of a file in case of
an error condition, resulting in the 404 error for each further file
request. Users can work-around the issue by disabling the PUT request
support.
CVSS信息
N/A
漏洞类别
清理环节不完整