CVE-2019-3994CWE-416

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free

published December 17, 2019

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieve_url() to use a freed variable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03278 · 88.4th percentile
Weakness
CWE-416 · Use After Free
Published
2019-12-17T21:59Z
EPSS history
Timeline
  • 17 DEC 21:59Z
    ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free
    cvelistv5