CVE-2019-16200

GNU Serveez through 0.2.2 has an Information Leak. An attacker may send an HTTP POST request to the /cgi-bin/reader URI. The attacker must include a Content-length header with a large positive value that, when represented in 32 bit binary, evaluates to a negative number. The problem exists in the http_cgi_write function under http-cgi.c; however, exploitation might show svz_envblock_add in libserveez/passthrough.c as the location of the heap-based buffer over-read.

• CWE-681

• https://github.com/agadient/SERVEEZ-CVEExploit, Third Party Advisory
• https://github.com/agadient/SERVEEZ-CVEExploit, Third Party Advisory

Published

Nov 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16194SQL injection vulnerabilities in Centreon through 19.04 allo…9.8
• CVE-2019-16195Centreon before 2.8.30, 18.x before 18.10.8, and 19.x before…6.1
• CVE-2019-16197In htdocs/societe/card.php in Dolibarr 10.0.1, the value of …6.1
• CVE-2019-16198KSLabs KSWEB 3.93 allows ../ directory traversal, as demonst…6.5
• CVE-2019-16199eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 a…9.8
• CVE-2019-1620A vulnerability in the web-based management interface of Cis…9.8
• CVE-2019-16201WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x t…7.5
• CVE-2019-16202MISP before 2.4.115 allows privilege escalation in certain s…6.5
• CVE-2019-16203Brocade Fabric OS Versions before v8.2.2a and v8.2.1d could …7.5
• CVE-2019-16204Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j …7.5
• CVE-2019-16205A vulnerability, in Brocade SANnav versions before v2.0, cou…8.8
• CVE-2019-16206The authentication mechanism, in Brocade SANnav versions bef…5.5