VYPR
← All advisories
High severity7.5NVD Advisory· Published Jul 22, 2019· Updated Jun 17, 2026

CVE-2019-1010218

CVE-2019-1010218

Description

Cherokee Webserver Latest Cherokee Web server Upto Version 1.2.103 (Current stable) is affected by: Buffer Overflow - CWE-120. The impact is: Crash. The component is: Main cherokee command. The attack vector is: Overwrite argv[0] to an insane length with execl. The fixed version is: There's no fix yet.

Affected products

3
  • Cherokee/Cherokee Web Server
    cpe:2.3:a:cherokee-project:cherokee_web_server:*:*:*:*:*:*:*:*
    Range: <=1.2.103
  • Cherokee/Cherokee Httpdllm-fuzzy
    Range: <=1.2.103
  • Cherokee Webserver/Latest Cherokee Web serverv5
    Range: Upto Version 1.2.103 (Current stable) [fixed: There's no fix yet]

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.