| Package | Affected versions | Patched versions |
|---|---|---|
| motion | = 3.1.17= 3.1.18= 3.1.19= 3.1.20= 3.2.1= 3.2.2= 3.2.3= 3.2.4= 3.2.5= 3.2.6= 3.2.7= 3.2.8= 3.2.9≤ 3.2.10 |
Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free