GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function.
| Software | From | Fixed in |
|---|---|---|
| goahead / goahead_webserver | 2.0 | 2.0.x |
| goahead / goahead_webserver | 2.1.2 | 2.1.2.x |
| goahead / goahead_webserver | 2.1.1 | 2.1.1.x |
| goahead / goahead_webserver | 2.1 | 2.1.x |
| goahead_software / goahead_webserver | - | 2.1.5.x |
| goahead_software / goahead_webserver | 2.1.4 | 2.1.4.x |
| goahead_software / goahead_webserver | 2.1.3 | 2.1.3.x |