Lotos Webserver
1 CVEs
product
Monthly
Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mishandled. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Memory Corruption
Use After Free
Information Disclosure
Lotos Webserver
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.2%
CVE-2024-22088
EPSS 0%
CVSS 9.8
CRITICAL
POC
Act Now
Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mishandled. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Memory Corruption
Use After Free
Information Disclosure
+1
NVD
GitHub