harleyliao

2 exploits Active since Dec 2023

CVE-2023-52266 WRITEUP HIGH WRITEUP

ehttp 1.0.6 - Use-After-Free in epoll_socket.cpp read_func

ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over a short time to trigger this.

CVSS 7.5

View Code

CVE-2023-52267 WRITEUP HIGH WRITEUP

ehttp 1.0.6 - Out-of-bounds Read in Error Logging

ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings.

CVSS 7.5

View Code