h2o access-log formatter buffer overflow
Using a certain logging setting in h2o web server lets one request stop it.
Summary
The access-log formatter in the h2o web server can write past its log-line buffer. When an affected custom access-log format is configured, a matching request can crash the server.
Affected when
- Affected custom access-log format configured
What to do
Update to a build that includes commit 48b7ae12107fd2b118e4641da49599e9aac8edd8.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen