CVE-2016-9564
HIGHBoa 0.92r - Denial of Service via Long URI in send_redirect()
Title source: llmDescription
Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters.
References (2)
Core 2
Core References
Exploit, Technical Description, URL Repurposed x_refsource_misc
http://www.ljcusack.io/cve-2016-9564-stack-based-buffer-overflow-in-boa-0-dot-92r
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/94599
Scores
CVSS v3
7.5
EPSS
0.0144
EPSS Percentile
69.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
Status
published
Products (1)
boa/boa
0.92r
Published
Nov 30, 2016
Tracked Since
Feb 18, 2026