Xampp vulnerabilities

3 known vulnerabilities in Xampp from Apachefriends. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  XAMPP: Uncontrolled Resource Consumption

  CVE-2024-5055May 17, 2024Apache Friends

  Uncontrolled resource consumption vulnerability in XAMPP Windows, versions 7.3.2 and earlier. This vulnerability exists when XAMPP attempts to process many incomplete HTTP requests, resulting in resource consumption and system crashes.

• 9.8 Critical severity

  XAMPP: Buffer Copy without Checking Size of Input

  CVE-2024-0338Feb 2, 2024Apachefriends

  A buffer overflow vulnerability has been found in XAMPP affecting version 8.2.4 and earlier. An attacker could execute arbitrary code through a long file debug argument that controls the Structured Exception Handler (SEH).

• 8.8 High severity

  Xampp: Incorrect Default Permissions

  CVE-2022-29376May 23, 2022ApachefriendsEPSS 1.46%

  Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.