Lucene search
HistoryAug 22, 2022 - 8:15 p.m.
CVE-2022-38668
cve-2022-38668
crow
http server
vulnerability
stack memory
security issue
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.9%
HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB.
Affected configurations
Node
crowcppcrowMatch1.0\+4
| CPE | Name | Operator | Version |
|---|---|---|---|
| crowcpp:crow | crowcpp crow | eq | 1.0+4 |
References
Social References
More
Related
nvd
nvd
CVE-2022-38668
2022-08-22 20:15:08
osv
osv
CVE-2022-38668
2022-08-22 20:15:08
prion
prion
Design/Logic Flaw
2022-08-22 20:15:00
cvelist
cvelist
CVE-2022-38668
2022-08-22 19:06:02
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.9%
Related for CVE-2022-38668