Vulnerability Details CVE-2020-26566
A Denial of Service condition in Motion-Project Motion 3.2 through 4.3.1 allows remote unauthenticated users to cause a webu.c segmentation fault and kill the main process via a crafted HTTP request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://github.com/Motion-Project/motion/issues/1227#issuecomment-715927776
- https://github.com/Motion-Project/motion/releases
- https://motion-project.github.io/index.html
- https://security.gentoo.org/glsa/202208-18
- https://github.com/Motion-Project/motion/issues/1227#issuecomment-715927776
- https://github.com/Motion-Project/motion/releases
- https://motion-project.github.io/index.html
- https://security.gentoo.org/glsa/202208-18
Products affected by CVE-2020-26566
-
cpe:2.3:a:motion_project:motion:3.2
-
cpe:2.3:a:motion_project:motion:3.2.10
-
cpe:2.3:a:motion_project:motion:3.2.11
-
cpe:2.3:a:motion_project:motion:3.2.11.1
-
cpe:2.3:a:motion_project:motion:3.2.12
-
cpe:2.3:a:motion_project:motion:3.2.9
-
cpe:2.3:a:motion_project:motion:3.4.1
-
cpe:2.3:a:motion_project:motion:4.0
-
cpe:2.3:a:motion_project:motion:4.0.1
-
cpe:2.3:a:motion_project:motion:4.1
-
cpe:2.3:a:motion_project:motion:4.1.1
-
cpe:2.3:a:motion_project:motion:4.2
-
cpe:2.3:a:motion_project:motion:4.2.1
-
cpe:2.3:a:motion_project:motion:4.2.2
-
cpe:2.3:a:motion_project:motion:4.3.0
-
cpe:2.3:a:motion_project:motion:4.3.1