CyberRota Analysis
AI-GeneratedGoAccess versions prior to 1.11 are vulnerable due to a flaw in the parse_ios() function, which allows an attacker to exploit a crafted User-Agent string to read memory beyond the allocated heap, potentially leading to a crash of the application. Organizations using GoAccess for web log analysis should prioritize updating to version 1.11 or later to mitigate the risk of this vulnerability, as it could be exploited to disrupt service availability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to 1.11, the parse_ios() function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent in a processed access log to read up to approximately 4 KB beyond the heap allocation and conditionally crash GoAccess. This issue is fixed in version 1.11.