Security Advisory
CVE-2018-12684
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file.