CVE-2020-29596
MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash)...
MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash) via a long name for the first parameter in a POST request.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash) via a long name for the first parameter in a POST request.
- Record
CVE-2020-29596- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash) via a long name for the first parameter in a POST request.
- Record
CVE-2020-29596- Updated
- 2026-11-02
EUVDEUVD-2020-21957 No score
MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash) via a long name for the first parameter in a POST request.
- Record
EUVD-2020-21957- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-crm8-2hrx-527c No score
MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash)...
MiniWeb HTTP server 0.8.19 allows remote attackers to cause a denial of service (daemon crash) via a long name for the first parameter in a POST request.
- Record
GHSA-crm8-2hrx-527c- Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-29596 is a high vulnerability (CVSS 7.5) in Miniweb Http Server Project Http Server, published December 21, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.69%, the 86th percentile. No source names a fixed version.
References
sourceforge.net/projects/miniweb/files/miniweb/0.8
packetstormsecurity.com/files/160470/MiniWeb-HTTP-Server-0.8.19-Buffer-Overflow.html
exploit-db.com/exploits/49247
securityforeveryone.com/blog/miniweb-http-server-vulnerability-0-day-cve-2020-29596
nvd.nist.gov/vuln/detail/CVE-2020-29596
github.com/advisories/GHSA-crm8-2hrx-527c