UBUNTU-CVE-2026-29035

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-29035

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-29035.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-29035

Upstream

CVE-2026-29035

Published

2026-08-13T00:00:00Z

Modified

2026-08-13T19:30:15.302399756Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVSS Calculator
8.3 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the readwebsocket() function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USEZLIB and MGEXPERIMENTALINTERFACES are defined. Attackers can negotiate permessage-deflate during the WebSocket handshake and send a crafted frame with the RSV1 bit set, causing the server to write a 4-byte zlib sync trailer out-of-bounds past the allocated buffer, leading to heap metadata corruption, denial of service, or potential code execution.

References

Affected packages

Ubuntu:22.04:LTS / civetweb

Package

Name: civetweb
Purl: pkg:deb/ubuntu/civetweb?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.13+dfsg-5

1.15+dfsg-1

1.15+dfsg-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "1.15+dfsg-3",
            "binary_name": "civetweb"
        },
        {
            "binary_version": "1.15+dfsg-3",
            "binary_name": "libcivetweb1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-29035.json"

Ubuntu:24.04:LTS / civetweb

Package

Name: civetweb
Purl: pkg:deb/ubuntu/civetweb?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.16+dfsg-1

1.16+dfsg-1build1

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "1.16+dfsg-1build1",
            "binary_name": "civetweb"
        },
        {
            "binary_version": "1.16+dfsg-1build1",
            "binary_name": "libcivetweb1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-29035.json"

Ubuntu:26.04:LTS / civetweb

Package

Name: civetweb
Purl: pkg:deb/ubuntu/civetweb?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.16+dfsg-2

1.16+dfsg-3

Ecosystem specific

{
    "binaries": [
        {
            "binary_version": "1.16+dfsg-3",
            "binary_name": "civetweb"
        },
        {
            "binary_version": "1.16+dfsg-3",
            "binary_name": "libcivetweb1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-29035.json"