Use-after-free in GoAhead - CVE-2019-5096

Vulnerability details

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing a multi-part/form-data HTTP request with multiple Content-Disposition headers in the same request. A remote attacker can send a specially crafted HTTP request, corrupt heap structures and execute arbitrary code on the target system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Affected software

How to mitigate CVE-2019-5096

Links to Public Exploits and PoC-codes

• Exploit #6716 - CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit (CVE-2019-5096(UAF in upload handler) exploit cause Denial of Service) (September 7, 2021)
• Exploit #271 - CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit (CVE-2019-5096(UAF in upload handler) exploit cause Denial of Service) (March 18, 2020)

External References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0888

Related Security Bulletins

• Multiple vulnerabilities in EmbedThis GoAhead
• Multiple vulnerabilities in Rockwell Automation products using GoAhead Web Server