TI-2016-07787 Aliases CVE-2016-9564 GHSA-h874-fgv9-3qxw

Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS…

LOW 36CWE-20Published 2016-11-30 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Buffer overflow in send_redirect() in Boa Webserver 0.92r allows remote attackers to DoS via an HTTP GET request requesting a long URI with only '/' and '.' characters.

Why it matters now

EPSS 0.01437 73rd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:boa:boa:0.92r:::::::*	0.92r	Vulnerable	Boa

cpe:2.3:a:boa:boa:0.92r:*:*:*:*:*:*:* Versions 0.92r Vulnerable ·Boa

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2016-9564
2026-10-03 Alias added: GHSA-h874-fgv9-3qxw

References

Exploit 1

http://www.ljcusack.io/cve-2016-9564-stack-based-buffer-overflow-in-boa-0-dot-92r

TI-2017-07207 /cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA… CVSS 3.1HIGH 7.5
TI-2022-22725 Boa Web Server versions 0.94.13 through 0.94.14 fail to validate the correct security… CVSS 3.1MEDIUM 5.3
TI-2021-12952 Boa 0.94.13 allows remote attackers to obtain sensitive information via a… CVSS 3.1HIGH 7.5
TI-2018-14989 Boa through 0.94.14rc21 allows remote attackers to trigger an out-of-memory (OOM)… CVSS 3.1CRITICAL 9.8
TI-2022-21684 Boa 0.94.14rc21 is vulnerable to SQL Injection via username. CVSS 3.1CRITICAL 9.8
TI-2018-14990 Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function. CVSS 3.1HIGH 7.5

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences