tocsin

Debian/swupdate: unknown

SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of service by sending a crafted HTTP

Action: Upgrade swupdate to 2022.12+dfsg-4+deb12u2 or later.

Affected

introducedfixedlast affected
02022.12+dfsg-4+deb12u2-

Fixed versions

2022.12+dfsg-4+deb12u2

Sources

published · modified · JSON