CVE-2019-17502

HIGH 7.5EPSS 1.7%

Hydra through 0.1.8 has a NULL pointer dereference and daemon crash when processing POST requests that lack a Content-Length header. read.c, request.c, and util.c contribute to this. The process_header_end() function calls boa_atoi(), which ultimately calls atoi() on a NULL pointer.

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 1.70% chance of exploitation in the next 30 days, 76th percentile
Published: 2019-10-12
Updated: 2024-08-05

Proof-of-concept exploits (1)

https://gist.github.com/fxb6476/0b9883a88ff2ca40de46a8469834e16c

References

Related