Description (CNA)
In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenBSD / OpenBSD | affected 7.4 before 7.4 errata 006; unaffected 7.4 errata 006; affected 7.3 before 7.3 errata 020; unaffected 7.3 errata 020 |
CWE
CWE-476
References
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/006_httpd.patch.sig
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/020_httpd.patch.sig
ADP enrichment
No English description supplied.
No references supplied.