CVE-2024-10395

Summary

CVE-2024-10395 is a newly disclosed vulnerability affecting http servers. This issue arises due to insufficient input validation in the function http_server_get_content_type_from_extension. An attacker can exploit this vulnerability by supplying excessively long user input, potentially leading to buffer overflow or memory corruption, resulting in server crashes or arbitrary code execution. Servers that have not been patched are at risk. It is strongly recommended that affected systems be updated as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.