CVE-2022-1543: Improper handling of Length parameter in erudika/scoold
Improper handling of Length parameter in GitHub repository erudika/scoold prior to 1.49.4. When the text size is large enough the service results in a momentary outage in a production environment. That can lead to memory corruption on the server.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1543?
The severity of CVE-2022-1543 is critical.
What is the affected software for CVE-2022-1543?
The affected software for CVE-2022-1543 is Erudika Scoold version up to 1.49.4.
What is the impact of CVE-2022-1543?
The impact of CVE-2022-1543 is memory corruption on the server, leading to a momentary outage in a production environment.
How can I fix CVE-2022-1543?
To fix CVE-2022-1543, update your Erudika Scoold installation to version 1.49.4 or above.
Where can I find more information about CVE-2022-1543?
You can find more information about CVE-2022-1543 at the following references: [GitHub Commit](https://github.com/erudika/scoold/commit/62a0e92e1486ddc17676a7ead2c07ff653d167ce), [Huntr Bounty](https://huntr.dev/bounties/9889d435-3b9c-4e9d-93bc-5272e0723f9f).