CVE-2016-9564
HighSummary
Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to perform a DoS attack via an HTTP GET request with a long URI consisting only of '/' and '.' characters.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the server's operation, leading to service unavailability for users.
Recommendation
It is recommended to update the Boa Webserver to the latest version to mitigate this vulnerability and to monitor server logs for potential attack attempts.
Other vulnerabilities in Boa Webserver 0.92r
See all- CVE-2024-40084Critical
In the Vilo 5 Mesh WiFi system version 5.16.1.33 and earlier, the Boa webserver contains a buffer overflow vulnerability. A remote, unauthenticated attacker can exploit exceptionally long HTTP methods or paths to execute arbitrary code.
- CVE-2024-40088Medium
A Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System versions up to 5.16.1.33 allows remote, unauthenticated attackers to enumerate the existence and length of any file in the filesystem by placing malicious payloads in the path of any HTTP request.
Original NVD description (English source)
Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters.