Threats tagged 'ghsa-xrf6-v8xr-fg2f'

A stack-based buffer overflow vulnerability exists in the get_merge_ipaddr function of the httpd binary on Linksys E1200 v2 routers with firmware version E1200_v2.0.11.001_us. This flaw allows remote attackers to send specially crafted HTTP requests with up to four user-supplied CGI parameters concatenated without bounds checking, leading to arbitrary code execution or denial of service without authentication.