CVE-2022-34970
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows a...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web cwe.mitre.org
- web github.com
- web github.com