CVE-2010-5301
HighSummary
Kolibri 2.0 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long URI in a HEAD request.
Risk Assessment
Attackers can exploit this vulnerability to execute remote code, potentially taking control of the system.
Recommendation
It is recommended to update Kolibri to the latest version to mitigate this vulnerability.
Other vulnerabilities in Kolibri 2.0
See all- CVE-2014-4158High
Kolibri 2.0 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long URI in a GET request.
- CVE-2026-48053Medium
Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body back to the caller. The original report identified two endpoints on the `RemoteFacilityUser*` viewsets; remediation review found two further reflection points on the same pattern. The GET endpoint was unauthenticated. Version 0.19.4 fixes the vulnerability.
Original NVD description (English source)
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD request.