CVE-2022-4066
Low
Description
A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028.
SeverityLow
CVSS3.5
Exploit probability—
Product
Onion
PublishedNov 19, 2022
First seenNov 19, 2022
Weakness typeCWE-404CWE-404
How to fix
Update
- onion_project onion2022-09-05 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| onion_project onion | v < 2022-09-05 | 2022-09-05 |
| mozilla firefox | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.