CyberRota Analysis
AI-GeneratedGoAccess versions prior to 1.11 are vulnerable to a heap overflow due to improper handling of User-Agent strings, which can lead to memory corruption or application crashes. This vulnerability can be exploited by attackers to manipulate access logs, potentially compromising the integrity of log data. Organizations using GoAccess for web log analysis should prioritize upgrading to version 1.11 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, parse_browser assumes the matched browser token begins with Opera and moves a trailing version substring to match plus five, allowing a crafted User-Agent in a processed access log to write one to four attacker-influenced bytes beyond the heap allocation and corrupt or crash GoAccess. This issue is fixed in version 1.11.