CVE-2024-10395

Published Feb 3, 2025

Last updated 25 days ago

CVSS high 8.6

Overview

Description
No proper validation of the length of user input in http_server_get_content_type_from_extension.
Source
vulnerabilities@zephyrproject.org
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.6
Impact score
4.7
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Severity
HIGH

Weaknesses

vulnerabilities@zephyrproject.org
CWE-127

Social media

Hype score
Not currently trending

  1. CVE-2024-10395 (CVSS:8.6, HIGH) is Awaiting Analysis. No proper validation of the length of user input in http_server_get_content_type_from_extension...https://t.co/3zYSFKWZPk #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    @cracbot

    8 Feb 2025

    2 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2024-10395 - Apache HTTP Server Input Validation Vulnerability https://t.co/g4IXmv8bYy

    @WhalersLtd

    3 Feb 2025

    66 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. CVE-2024-10395 No proper validation of the length of user input in http_server_get_content_type_from_extension. https://t.co/LKlSZZNvwD

    @CVEnew

    3 Feb 2025

    672 Impressions

    0 Retweets

    1 Like

    1 Bookmark

    0 Replies

    0 Quotes

  4. [CVE-2024-10395: HIGH] No proper validation of the length of user input in http_server_get_content_type_from_extension.#cybersecurity,#vulnerability https://t.co/1OB3nM03xf https://t.co/yfn5lfeVJV

    @CveFindCom

    3 Feb 2025

    93 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References