Hongliuliao: >> Ehttp >> 1.0.6 Security Vulnerabilities
ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over a short time to trigger this.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-12-31
ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-12-31