Vulnerability Details CVE-2024-22088
Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mishandled.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.0%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2024-22088
-
cpe:2.3:a:chendotjs:lotos_webserver:0.1.0
-
cpe:2.3:a:chendotjs:lotos_webserver:0.1.1