Staging Environment: Content and features may be unstable or change without notice.
Advisory details: ubuntu_osv / UBUNTU-CVE-2014-4927
Advisory ID ubuntu_osv/UBUNTU-CVE-2014-4927
Aliases CVE-2014-4927
Summary Buffer overflow in ACME micro_httpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR-ADSL-DG834 routers allows remote attackers to cause a denial of service (crash) via a long string in the URI in a GET request.
Status Published
Exploitability 2.0
Weighted Severity 6.2
Risk 10.0
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
ubuntu-priority medium https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2014/UBUNTU-CVE-2014-4927.json
Reference id Reference type URL
http://osvdb.org/show/osvdb/109356
http://packetstormsecurity.com/files/127544/ACME-micro_httpd-Denial-Of-Service.html
https://ubuntu.com/security/CVE-2014-4927
https://www.cve.org/CVERecord?id=CVE-2014-4927
http://www.exploit-db.com/exploits/34102
Data source Exploit-DB
Date added July 18, 2014
Description ACME micro_httpd - Denial of Service
Ransomware campaign use Unknown
Source publication date July 18, 2014
Exploit type dos
Platform linux
Source update date July 18, 2014

No EPSS data available for this advisory.

Patch URL
There are no known patches.
There are no known vectors.

There are no SSVC decisions available.