hongliuliao/ehttp

hongliuliao/ehttp

Releases8
Frequency11 months 2 weeks
Last Release
Stars323
simple http server base on epoll

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH

ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over a short time to trigger this.

7.5 HIGH

ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings.