Unscored CVE-2022-38668 EUVD-2022-41237GHSA-5948-4f22-j6wp

HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilli…

Published Aug 22, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB.

References

https://github.com/CrowCpp/Crow/pull/523
https://gynvael.coldwind.pl/?id=752
https://github.com/0xhebi/CVEs/blob/main/Crow/CVE-2022-38668.md