fekberg/GoHttp

fekberg/GoHttp

Releases0

Stars96

This is a simple, work-in progress web server written in C for Linux.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-12198 ↗	May 20, 2019Monday, 20 May 2019, 04:29	—	5 MEDIUM
In GoHttp through 2017-07-25, there is a stack-based buffer over-read via a long User-Agent header.
CVE-2019-12158 ↗	May 17, 2019Friday, 17 May 2019, 19:29	—	7.5 HIGH
GoHTTP through 2017-07-25 has a GetExtension heap-based buffer overflow via a long extension.
CVE-2019-12159 ↗	May 17, 2019Friday, 17 May 2019, 19:29	—	5 MEDIUM
GoHTTP through 2017-07-25 has a stack-based buffer over-read in the scan function (when called from getRequestType) via a long URL.
CVE-2019-12160 ↗	May 17, 2019Friday, 17 May 2019, 19:29	—	7.5 HIGH
GoHTTP through 2017-07-25 has a sendHeader use-after-free.