Tuesday, June 18, 2024
Google search engine
HomeUncategorizedCVE-2023-40547 – avoid incorrectly trusting HTTP headers

CVE-2023-40547 – avoid incorrectly trusting HTTP headers



Browse files

Browse the repository at this point in the history

CVE-2023-40547 – avoid incorrectly trusting HTTP headers

When retrieving files via HTTP or related protocols, shim attempts to
allocate a buffer to store the received data.  Unfortunately, this means
getting the size from an HTTP header, which can be manipulated to
specify a size that's smaller than the received data.  In this case, the
code accidentally uses the header for the allocation but the protocol
metadata to copy it from the rx buffer, resulting in an out-of-bounds

This patch adds an additional check to test that the rx buffer is not
larger than the allocation.

Resolves: CVE-2023-40547
Reported-by: Bill Demirkapi, Microsoft Security Response Center
Signed-off-by: Peter Jones 

  • Loading branch information

Read More



Please enter your comment!
Please enter your name here

- Advertisment -
Google search engine

Most Popular

Recent Comments