HIGH
ACME Ultra Mini HTTPd HTTP GET Request denial of service
Published Jan 7, 2024
7.5
HIGHCVSS 3.1
EPSS 1.40%
Description
A vulnerability was found in ACME Ultra Mini HTTPd 1.21. It has been classified as problematic. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-249819.
Affected products
-
- Version 1.21StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| ACME | Ultra Mini HTTPd | n/a |
|
- 1.21
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- https://0day.today/exploit/description/39212 exploitThird Party Advisory
- https://packetstormsecurity.com/files/176333/Ultra-Mini-HTTPd-1.21-Denial-Of-Service.html relatedExploitThird Party AdvisoryVDB Entry
- https://vuldb.com/?ctiid.249819 signaturepermissions-requiredPermissions RequiredThird Party Advisory
- https://vuldb.com/?id.249819 vdb-entryPermissions RequiredThird Party Advisory
- https://www.youtube.com/watch?v=HWOGeg3e5As media-coverageExploit
| Link | Providers | Tags |
|---|---|---|
| https://0day.today/exploit/description/39212 | exploitThird Party Advisory | |
| https://packetstormsecurity.com/files/176333/Ultra-Mini-HTTPd-1.21-Denial-Of-Service.html | relatedExploitThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?ctiid.249819 | signaturepermissions-requiredPermissions RequiredThird Party Advisory | |
| https://vuldb.com/?id.249819 | vdb-entryPermissions RequiredThird Party Advisory | |
| https://www.youtube.com/watch?v=HWOGeg3e5As | media-coverageExploit |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Jan 7, 2024
Updated Sep 4, 2024
Reserved Jan 6, 2024
Link CVE-2024-0263
CISA Vulnrichment
Updated Mar 7, 2024