high7.5
CVE-2019-20799
In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.
Impact
In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cherokee-Project | Cherokee | through 1.2.104 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/cherokee/webserver/issues/1221
- https://github.com/cherokee/webserver/issues/1222
- https://github.com/cherokee/webserver/issues/1225
- https://github.com/cherokee/webserver/issues/1226
- https://logicaltrust.net/blog/2019/11/cherokee.html
- https://security.gentoo.org/glsa/202012-09
- https://github.com/cherokee/webserver/issues/1221
- https://github.com/cherokee/webserver/issues/1222
- https://github.com/cherokee/webserver/issues/1225
- https://github.com/cherokee/webserver/issues/1226
- https://logicaltrust.net/blog/2019/11/cherokee.html
- https://security.gentoo.org/glsa/202012-09