Debian/weborf: critical 9.1
cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\0' termination of the path for CGI scripts because strncpy is misused.
Action: Upgrade weborf to 1.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0-1 | - |
Fixed versions
| 1.0-1 |
Sources
- osv: DEBIAN-CVE-2023-46586#Debian:13/weborf
- https://security-tracker.debian.org/tracker/CVE-2023-46586
published · modified · JSON