Withdrawn Advisory: Out-of-bounds Read can lead to client side denial of service
## Withdrawn Advisory This advisory has been withdrawn because it is a bug, not a vulnerability. According to the maintainer, the bug only affects the client side of the request and cannot cause a denial of service on the server. ## Original Description An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) on the client side via a crafted URI.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-34037US | high7.5 | — | ||
An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) via a crafted URI. Note:… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/caddyserver/caddyPACKAGE
- https://github.com/caddyserver/caddy/commit/693e9b5283e675b56084ecc83d73176cab0ee27cWEB
- https://github.com/caddyserver/caddy/issues/4775WEB
- https://github.com/caddyserver/caddy/issues/4775#issuecomment-1203388116WEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-34037ADVISORY
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan