Threats tagged 'ghsa-6mcp-q5xf-jrp5'

A stack-based buffer overflow vulnerability exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers with firmware version E1200_v2.0.11.001_us.tar.gz. The vulnerability arises from improper concatenation of user-supplied CGI parameters into fixed-size buffers without adequate bounds checking. This flaw allows remote attackers to send specially crafted HTTP requests to trigger the overflow, potentially causing denial of service or arbitrary code execution without requiring authentication.