CVE-2022-38668

High

HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when…

mitre·CWE-908·Published 2022-08-22

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

189 chars

HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB.

NVDen

189 chars

HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB.

Las aplicaciones HTTP (servidores) basadas en Crow hasta 1.0+4 pueden revelar datos no inicializados potencialmente sensibles de la memoria de la pila al cumplir con una solicitud de un archivo estático de menos de 16 KB

CVE-2022-38668

CVSS metrics across sources