ID:5120 - Exploit for Buffer overflow in TL-WR841N - CVE-2019-17147

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper bounds checking by the "http_parser_main" function in the web service. A remote attacker on the local network can send a specially crafted HTTP Host request header, trigger memory corruption and execute arbitrary code in the context of the admin user.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation