Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-15505

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause a NULL pointer dereference and thus cause a denial of service, as demonstrated by the lack of a trailing ']' character in an IPv6 address.

Published

2018-08-18T03:29:00.457

Last Modified

2024-11-21T03:50:57.637

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

2.9

Weaknesses

Type: Primary
CWE-476

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	embedthis	appweb	< 7.0.2	Yes
Application	embedthis	goahead	< 4.0.1	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	12.3x48	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x49	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	15.1x53	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.1	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	16.2	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.1	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.2	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.3	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	17.4	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes
Operating System	juniper	junos	18.1	Yes

References

https://github.com/embedthis/appweb/commit/16e6979c82297d5fc4f8661e7ada975f51e4dfa9 Patch, Third Party Advisory ([email protected])
https://github.com/embedthis/appweb/issues/605 Broken Link, Exploit, Issue Tracking, Patch, Third Party Advisory ([email protected])
https://github.com/embedthis/goahead/issues/264 Broken Link, Exploit, Issue Tracking, Patch, Third Party Advisory ([email protected])
https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved?language=en_US Not Applicable ([email protected])
https://github.com/embedthis/appweb/commit/16e6979c82297d5fc4f8661e7ada975f51e4dfa9 Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/embedthis/appweb/issues/605 Broken Link, Exploit, Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/embedthis/goahead/issues/264 Broken Link, Exploit, Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved?language=en_US Not Applicable (af854a3a-2127-422b-91ae-364da2661108)