| Titolo | RICOH SP 221 V1.02 Denial of Service |
|---|
| Descrizione | An HTTP multipart/form-data parser in the analyzed RICOH SP 221 firmware enters an infinite loop when a multipart part header is not terminated by a newline. After the parser fails to find the expected newline, it returns to the same loop with an unchanged input cursor. A malformed HTTP request can therefore keep the HTTP request-processing task executing indefinitely and cause a denial of service. |
|---|
| Fonte | ⚠️ https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/01-SP221-multipart-parser-infinite-loop |
|---|
| Utente | xiaobor123 (UID 76914) |
|---|
| Sottomissione | 13/08/2026 13:20 (2 mesi fa) |
|---|
| Moderazione | 27/09/2026 16:33 (2 months later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 410908 [Ricoh SP 330DN/SP 221/SP C252SF//Aficio SP 3500SF fino a 20260813 HTTP Multipart Form-Data Parser negazione del servizio] |
|---|
| Punti | 0 |
|---|