FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-25 11:22:49 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
ce39379f-7eb7-11e8-ab03-00bd7f19ff09h2o -- heap buffer overflow during logging

Marlies Ruck reports:

Fix heap buffer overflow while trying to emit access log - see references for full details.

CVE-2018-0608: Buffer overflow in H2O version 2.2.4 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via unspecified vectors.


Discovery 2018-06-01
Entry 2018-07-03
h2o
< 2.2.5

CVE-2018-0608
https://github.com/h2o/h2o/issues/1775
https://github.com/h2o/h2o/releases/tag/v2.2.5