CVE-2022-45474: Use After Free
Published Nov 18, 2022
·Updated
drachtio-server 0.8.18 has a request-handler.cpp eventcb use-after-free for any request.
Affected Software
1 affected component
drachtio drachtio-server=0.8.18
Remediation
Event History
Nov 18, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-45474?
CVE-2022-45474 is considered to be critical due to the potential for a use-after-free vulnerability, which can lead to arbitrary code execution.
2
How do I fix CVE-2022-45474?
To fix CVE-2022-45474, you should upgrade to the latest patched version of drachtio-server.
3
What specific version of drachtio-server is affected by CVE-2022-45474?
CVE-2022-45474 specifically affects drachtio-server version 0.8.18.
4
What kind of attack can CVE-2022-45474 facilitate?
CVE-2022-45474 can facilitate an attack that exploits a use-after-free vulnerability, potentially allowing remote code execution.
5
Is CVE-2022-45474 related to memory management issues?
Yes, CVE-2022-45474 is associated with memory management issues due to the use-after-free error in the event_cb functionality.