Withdrawn Advisory: Out-of-bounds Read can lead to client side denial of service
## Withdrawn Advisory This advisory has been withdrawn because it is a bug, not a vulnerability. According to the maintainer, the bug only affects the client side of the request and cannot cause a denial of service on the server. ## Original Description An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) on the client side via a crafted URI.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-34037US | high7.5 | — | ||
An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) via a crafted URI. Note:… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/caddyserver/caddyPACKAGE
- https://github.com/caddyserver/caddy/commit/693e9b5283e675b56084ecc83d73176cab0ee27cWEB
- https://github.com/caddyserver/caddy/issues/4775WEB
- https://github.com/caddyserver/caddy/issues/4775#issuecomment-1203388116WEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-34037ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan