Threats tagged 'ghsa-44jx-mm6h-r8wp'

A stack-based buffer overflow vulnerability exists in the get_merge_mac function of the httpd binary on Linksys E1200 v2 routers with firmware version E1200_v2.0.11.001_us.tar.gz. The vulnerability arises because the function concatenates up to six user-supplied CGI parameters into a fixed-size buffer without proper bounds checking, allowing remote attackers to send specially crafted HTTP requests to trigger the overflow. This can lead to arbitrary code execution or denial of service without requiring authentication.