Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-3994
HistoryDec 17, 2019 - 10:15 p.m.

Design/Logic Flaw

2019-12-1722:15:00
PRIOn knowledge base
www.prio-n.com
4

0.007 Low

EPSS

Percentile

80.7%

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieve_url() to use a freed variable.

CPENameOperatorVersion
elogeq<= 3.1.4-57bea22
fedoraeq30
fedoraeq31

0.007 Low

EPSS

Percentile

80.7%