USN-8749-1: CivetWeb vulnerabilities
Ubuntu USN-8749-1 patches CivetWeb URI and HTTP request parsing flaws enabling remote DoS or possible code execution.
25
CVE-2025-55763
- CVSS 3.1
- 7.5 high
- EPSS
- 1%p68
- Published
- ·
- Modified
Description · NVD
Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of service or arbitrary code execution.
- Vendors
- civetweb project
- Products
- civetweb
- Weakness
- CWE-121
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H