Description
An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRTOS-WL 2.0.0. A specially crafted series of network requests can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.This vulnerability affects the NetX Duo Component HTTP Server implementation which can be found in x-cube-azrtos-f7\Middlewares\ST\netxduo\addons\http\nxd_http_server.c
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
STMicroelectronics X-CUBE-AZRT-H7RS
1.0.0affected
STMicroelectronics X-CUBE-AZRTOS-F4
1.1.0affected
STMicroelectronics X-CUBE-AZRTOS-F7
1.1.0affected
STMicroelectronics X-CUBE-AZRTOS-G0
1.1.0affected
STMicroelectronics X-CUBE-AZRTOS-G4
2.0.0affected
STMicroelectronics X-CUBE-AZRTOS-H7
3.3.0affected
STMicroelectronics X-CUBE-AZRTOS-L4
2.0.0affected
STMicroelectronics X-CUBE-AZRTOS-L5
2.0.0affected
STMicroelectronics X-CUBE-AZRTOS-WB
2.0.0affected
STMicroelectronics X-CUBE-AZRTOS-WL
2.0.0affected