critical9.8
CVE-2024-22086
handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution.
Impact
handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hayyp | Cherry | through 2021-01-05 |