CVE-2019-3995: Null Pointer Dereference
Published Dec 17, 2019
·Updated
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET request.
Affected Software
3 affected components
Elog Project Elog<=3.1.4-57bea22
Fedoraproject Fedora=30
Fedoraproject Fedora=31
Event History
Dec 17, 2019
CVE Published
via MITRE·09:59 PM
Data Sourced
via MITRE·09:59 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-3995.
2
What is the severity of CVE-2019-3995?
The severity of CVE-2019-3995 is high with a severity value of 7.5.
3
How does CVE-2019-3995 affect ELOG?
CVE-2019-3995 affects ELOG 3.1.4-57bea22 and below by causing a denial of service due to a NULL pointer dereference.
4
How can an attacker exploit CVE-2019-3995?
An attacker can exploit CVE-2019-3995 by sending a crafted HTTP GET request to crash the ELOG server.
5
Are there any fixes or patches available for CVE-2019-3995?
Please refer to the references provided for information on available fixes or patches for CVE-2019-3995.