CVE-2021-46901

HIGH

CETIC-6LBR <1.5.0 - Buffer Overflow

Title source: llm

Description

examples/6lbr/apps/6lbr-webserver/httpd.c in CETIC-6LBR (aka 6lbr) 1.5.0 has a strcat stack-based buffer overflow via a request for a long URL over a 6LoWPAN network.

References (2)

Core 2

Core References

Patch

https://github.com/cetic/6lbr/blob/c3092a1ccc6b6b0e668f33f6f4b2d6967975d664/examples/6lbr/apps/6lbr-webserver/httpd.c#L119

View Patch ZIP pw:eip

Exploit, Issue Tracking, Vendor Advisory

https://github.com/cetic/6lbr/issues/414

Scores

CVSS v3 7.5

EPSS 0.0022

EPSS Percentile 43.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-787

Status published

Products (1)

cetic/cetic-6lbr 1.5.0

Published Dec 31, 2023

Tracked Since Feb 18, 2026