Lucene search

K
cveVulDBCVE-2022-4066
HistoryNov 19, 2022 - 7:15 p.m.

CVE-2022-4066

2022-11-1919:15:10
CWE-404
VulDB
web.nvd.nist.gov
33
22
cve-2022-4066
davidmoreno onion
log handler
vulnerability
patch
resource allocation
nvd

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

50.2%

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028.

Affected configurations

Nvd
Node
mozillafirefoxMatch-
OR
onion_projectonionRange<2022-09-05
VendorProductVersionCPE
mozillafirefox-cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*
onion_projectonion*cpe:2.3:a:onion_project:onion:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "davidmoreno",
    "product": "onion",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Social References

More

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

50.2%

Related for CVE-2022-4066