CVE-2019-20799

In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2020-05-18

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Cherokee (Cherokee-project)

References

• https://github.com/cherokee/webserver/issues/1221
• https://github.com/cherokee/webserver/issues/1222
• https://github.com/cherokee/webserver/issues/1225
• https://github.com/cherokee/webserver/issues/1226
• https://logicaltrust.net/blog/2019/11/cherokee.html
• https://security.gentoo.org/glsa/202012-09