| Titel | RICOH SP C252SF V1.17 Denial of Service |
|---|
| Beschreibung | The HTTP multipart/form-data parser in the analyzed RICOH SP C252SF firmware enters an infinite loop when a multipart part header is not terminated by a newline. The parser retries the same boundary and header without advancing the input position. A malformed HTTP request can therefore prevent the request-processing task from completing and cause a denial of service. |
|---|
| Quelle | ⚠️ https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/05-SPC252SF-multipart-parser-infinite-loop |
|---|
| Benutzer | xiaobor123 (UID 76914) |
|---|
| Einreichung | 13.08.2026 13:49 (vor 2 Monaten) |
|---|
| Moderieren | 27.09.2026 16:33 (2 months later) |
|---|
| Status | Duplikat |
|---|
| VulDB Eintrag | 410908 [Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF bis 20260813 HTTP Multipart Form-Data Parser Denial of Service] |
|---|
| Punkte | 0 |
|---|