CVE-2022-45474 - drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request

CRITICAL

drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request

Published Nov 18, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.00%

drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48340		Advisory
https://github.com/drachtio/drachtio-server/commit/860f025468feb31c43227153d8fb3f34210a522e		PatchThird Party Advisory
https://github.com/drachtio/drachtio-server/issues/240		ExploitIssue TrackingThird Party Advisory