CVE-2014-4158
HighSummary
Kolibri 2.0 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long URI in a GET request.
Risk Assessment
Attackers can exploit this vulnerability to execute remote code, potentially leading to system compromise.
Recommendation
It is recommended to update Kolibri to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in Kolibri 2.0
See all- CVE-2010-5301High
Kolibri 2.0 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long URI in a HEAD request.
- CVE-2026-48053Medium
Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body back to the caller. The original report identified two endpoints on the `RemoteFacilityUser*` viewsets; remediation review found two further reflection points on the same pattern. The GET endpoint was unauthenticated. Version 0.19.4 fixes the vulnerability.
Original NVD description (English source)
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request.