CVE-2022-4066 - davidmoreno onion Log response.c onion_response_flush allocation of resources

Back Back to CVE browser

HIGH

davidmoreno onion Log response.c onion_response_flush allocation of resources

Published Nov 19, 2022

8.2

HIGH

CVSS 3.1

EPSS 1.13%

Description

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028.

Affected products

Vendor Davidmoreno Product Onion Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Davidmoreno

Onion

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51441
Advisory
https://github.com/davidmoreno/onion/commit/de8ea938342b36c28024fd8393ebc27b8442a161
PatchThird Party Advisory
https://github.com/davidmoreno/onion/pull/308
ExploitPatchThird Party Advisory
https://vuldb.com/?id.214028
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51441		Advisory
https://github.com/davidmoreno/onion/commit/de8ea938342b36c28024fd8393ebc27b8442a161		PatchThird Party Advisory
https://github.com/davidmoreno/onion/pull/308		ExploitPatchThird Party Advisory
https://vuldb.com/?id.214028		Third Party Advisory