Vulnerability Description
uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large negative Content-Length value.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openwrt | Openwrt | >= 18.06.0, <= 18.06.5 |
Related Weaknesses (CWE)
References
- https://github.com/openwrt/openwrt/commits/masterPatchThird Party Advisory
- https://openwrt.org/advisory/2020-01-13-1Vendor Advisory
- https://github.com/openwrt/openwrt/commits/masterPatchThird Party Advisory
- https://openwrt.org/advisory/2020-01-13-1Vendor Advisory
FAQ
What is CVE-2019-19945?
CVE-2019-19945 is a vulnerability with a CVSS score of 7.5 (HIGH). uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an ...
How severe is CVE-2019-19945?
CVE-2019-19945 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-19945?
Check the references section above for vendor advisories and patch information. Affected products include: Openwrt Openwrt.