CVEvulnerability
CVE-2024-0263
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-01-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-404
Description
A vulnerability was found in ACME Ultra Mini HTTPd 1.21. It has been classified as problematic. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-249819.
Affected configurations
• acme ultra mini httpd 1.21
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://0day.today/exploit/description/39212 Third Party Advisory
- https://packetstormsecurity.com/files/176333/Ultra-Mini-HTTPd-1.21-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry
- https://vuldb.com/?ctiid.249819 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.249819 Permissions Required, Third Party Advisory
- https://www.youtube.com/watch?v=HWOGeg3e5As Exploit
- https://0day.today/exploit/description/39212 Third Party Advisory
- https://packetstormsecurity.com/files/176333/Ultra-Mini-HTTPd-1.21-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry
- https://vuldb.com/?ctiid.249819 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.249819 Permissions Required, Third Party Advisory
- https://www.youtube.com/watch?v=HWOGeg3e5As Exploit