Aller au contenu
Non notée

CVE-2019-3994 ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free

Description

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieve_url() to use a freed variable.

Produits et versions touchés

Produit Versions touchées Corrigé en
ELOG Versions non publiées
Les 5 CVE de ELOG →
Suivre cette CVE