Out-of-bounds Read can lead to client side denial of service
High severity
GitHub Reviewed
Published
Jul 23, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Jul 22, 2022
Published to the GitHub Advisory Database
Jul 23, 2022
Reviewed
Jul 27, 2022
Last updated
Jan 27, 2023
An out-of-bounds read in the rewrite function at /modules/caddyhttp/rewrite/rewrite.go in Caddy v2.5.1 allows attackers to cause a Denial of Service (DoS) on the client side via a crafted URI.
According to the maintainer, the bug only affects the client side of the request and cannot cause a denial of service on the server.
References