Skip to content
Noroxi

CrowCpp records

6 published records for vendor CrowCpp.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 22
  2. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2022-34970
    40Plan

    Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h.

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    crowcpp · crowAug 4, 2022

  • CVE-2022-38667
    40Plan

    HTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code execution when HTTP pipelining is used.

    CriticalCVSS 9.8No exploitEPSS 3%

    crowcpp · crowAug 22, 2022

  • CVE-2021-23514
    30Monitor

    This affects the package Crow before 0.3+4.

    HighCVSS 7.5No exploitEPSS 1%

    crowcpp · crowJan 13, 2022

  • CVE-2022-38668
    30Monitor

    HTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfillin

    HighCVSS 7.5No exploitEPSS 1%

    crowcpp · crowAug 22, 2022

  • CVE-2021-23824
    24Monitor

    This affects the package Crow before 0.3+4.

    MediumCVSS 6.1No exploitEPSS 0%

    crowcpp · crowJan 13, 2022

  • CVE-2023-26142
    24Monitor

    All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values.

    MediumCVSS 6.1No exploitEPSS 0%

    crowcpp · crowSep 12, 2023