weston-embedded / uC-HTTP

The embedded HTTP server and client module for µC/TCP-IP.

weston-embedded/uC-HTTP Issues

Incomplete query strings lead to lockup of request parser
Updated 6 months ago1
Denial of Service if FormCfgPtr pointer not set correctly
Closed 3 years ago1
Denial of Service with multipart forms when '=' not found
Closed 3 years ago1
HTTPs DoS attack if the multipart forms feature is enabled but a connection's FormCfgPtr is NULL.
Closed 3 years ago
Possible HTTPs DoS attack found by Cisco/Talos due to an unchecked pointer that gets incremented.
Closed 3 years ago
HTTPsConn_ErrInternal() sets the incorrect status code if the request isn't successfully parsed.
Closed 3 years ago
HTTPs mishandles the HTTPs_CONN_STATE_ERR_INTERNAL state by not processing it.
Closed 3 years ago