HTTP: Post Bad Header Evasion

This signature detects attempts to exploit a known vulnerability against EmbedThis GoAhead. A successful attack can lead to denial of service.

Extended Description

In http.c in Embedthis GoAhead before 4.1.1 and 5.x before 5.0.1, a header parsing vulnerability causes a memory assertion, out-of-bounds memory reference, and potential DoS, as demonstrated by a colon on a line by itself.

Affected Products

Embedthis goahead

References

CVE: CVE-2019-12822

Short Name

HTTP:HEADER:POST-BAD-HEADER

Severity

Minor

Recommended

True

Recommended Action

Drop

HTTP: Post Bad Header Evasion

Extended Description

Affected Products

References

Found a potential security threat?