QwikSec

Security Database

CVE

CWE

Training

CVE-2019-3994

Published: Dec 17, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the ELOG function retrieve_url() to use a freed variable.

Vendor	Product	Versions
n/a	ELOG	affected `ELOG 3.1.4-57bea22 and below`

Weaknesses (CWE)

References

https://www.tenable.com/security/research/tra-2019-53

x_refsource_MISC

FEDORA-2020-9f8bc040c8

vendor-advisory

x_refsource_FEDORA

FEDORA-2020-f49fe7f011

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.