| Package | Affected versions | Patched versions |
|---|---|---|
| sthttpd | < 2.27.1 | 2.27.1 |
Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free