CVE-2021-40540 | BDVDB-2026-160261 Detail

Description#

ulfius_uri_logger in Ulfius HTTP Framework before 2.7.4 omits con_info initialization and a con_info->request NULL check for certain malformed HTTP requests.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/babelouest/ulfius/commit/c83f564c184a27145e07c274b305cabe943bbfaa
https://github.com/babelouest/ulfius/compare/v2.7.3...v2.7.4
http://packetstormsecurity.com/files/164152/Ulfius-Web-Framework-Remote-Memory-Corruption.html

Exploit#

No public exploit known

History#

Version 12021-09-07Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.