ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieve_url() to use a freed variable.
References
Configurations
History
07 Nov 2023, 03:10
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2019-12-17 22:15
Updated : 2024-02-28 17:28
NVD link : CVE-2019-3994
Mitre link : CVE-2019-3994
CVE.ORG link : CVE-2019-3994
JSON object : View
Products Affected
elog_project
- elog
fedoraproject
- fedora
CWE
CWE-416
Use After Free