CVE-2022-34970
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows a...
Original description
The description as published by the source.
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web cwe.mitre.org
- web github.com
- web github.com