vulnerability
FreeBSD: VID-84dc49b0-b267-11e5-8a5b-00262d5ed8ee (CVE-2015-1548): mini_httpd -- buffer overflow via snprintf
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Jan 3, 2016 | Dec 10, 2025 | Dec 10, 2025 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Jan 3, 2016
Added
Dec 10, 2025
Modified
Dec 10, 2025
Description
ACME Updates reports: mini_httpd 1.21 and earlier allows remote attackers to obtain sensitive information from process memory via an HTTP request with a long protocol string, which triggers an incorrect response size calculation and an out-of-bounds read. (rene) ACME, the author, claims that the vulnerability is fixed *after* version 1.22, released on 2015-12-28
Solution
freebsd-upgrade-package-mini_httpd
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.