Tuesday, June 18, 2024
Google search engine
HomeUncategorizedCVE-2023-40547 – avoid incorrectly trusting HTTP headers

CVE-2023-40547 – avoid incorrectly trusting HTTP headers

Commit

Permalink

Browse files

Browse the repository at this point in the history

CVE-2023-40547 – avoid incorrectly trusting HTTP headers

When retrieving files via HTTP or related protocols, shim attempts to
allocate a buffer to store the received data.  Unfortunately, this means
getting the size from an HTTP header, which can be manipulated to
specify a size that's smaller than the received data.  In this case, the
code accidentally uses the header for the allocation but the protocol
metadata to copy it from the rx buffer, resulting in an out-of-bounds
write.

This patch adds an additional check to test that the rx buffer is not
larger than the allocation.

Resolves: CVE-2023-40547
Reported-by: Bill Demirkapi, Microsoft Security Response Center
Signed-off-by: Peter Jones 

  • Loading branch information

Read More

RELATED ARTICLES

LEAVE A REPLY

Please enter your comment!
Please enter your name here

- Advertisment -
Google search engine

Most Popular

Recent Comments