CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2025-55763

Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request. This vulnerability is triggered during request processing and may allow an attacker to corrupt heap memory, potentially leading to denial of service or arbitrary code execution.

Score
7.5 high
Published
2025-08-29
Links
NVD · cve.org

Matched ports (1)

PortPackageVersionStatusMaintainer
www/civetwebcivetweb1.15unaddressedmaintainer.freebsd@xpoundit.com

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>civetweb</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16
	(latest) allows a remote attacker to achieve remote code execution via
	a crafted HTTP request. This vulnerability is triggered during request
	processing and may allow an attacker to corrupt heap memory,
	potentially leading to denial of service or arbitrary code execution.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2025-55763</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2025-55763</url>
    </references>
    <dates>
      <discovery>2025-08-29</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>