CVE-2025-55763: Buffer Overflow
Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of service or arbitrary code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/civetwebto a version that resolves this vulnerability.Fixed in 1.16+dfsg-2+deb13u1Fixed in 1.16+dfsg-5
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55763?
CVE-2025-55763 has a high severity due to its potential for remote code execution and heap memory corruption.
How do I fix CVE-2025-55763?
To fix CVE-2025-55763, upgrade CivetWeb to version 1.17 or later.
What products are affected by CVE-2025-55763?
CVE-2025-55763 affects CivetWeb versions 1.14 through 1.16.
Can CVE-2025-55763 be exploited remotely?
Yes, CVE-2025-55763 can be exploited remotely via a crafted HTTP request.
What type of vulnerability is CVE-2025-55763?
CVE-2025-55763 is a buffer overflow vulnerability in the URI parser of CivetWeb.