medium4.3
CVE-2022-1289
A denial of service vulnerability was found in tildearrow Furnace.
Impact
A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tildearrow | Furnace | All versions Versions 0.2, 0.2.1, 0.2.2, 0.3, 0.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/tildearrow/furnace/commit/0eb02422d5161767e9983bdaa5c429762d3477ce
- https://github.com/tildearrow/furnace/issues/325#issuecomment-1094139655
- https://vuldb.com/?id.196755
- https://github.com/tildearrow/furnace/commit/0eb02422d5161767e9983bdaa5c429762d3477ce
- https://github.com/tildearrow/furnace/issues/325#issuecomment-1094139655
- https://vuldb.com/?id.196755