Lucene search

PRIOn knowledge basePRION:CVE-2022-38668

HistoryAug 22, 2022 - 8:15 p.m.

Design/Logic Flaw

2022-08-2220:15:00

PRIOn knowledge base

www.prio-n.com

http

server

crow

data leak

stack memory

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

JSON

HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB.

CPENameOperatorVersion
croweq1.4.0

CPE	Name	Operator	Version
	crow	eq	1.4.0

References

github.com/0xhebi/CVEs/blob/main/Crow/CVE-2022-38668.md

github.com/CrowCpp/Crow/pull/523

gynvael.coldwind.pl/?id=752