CVEvulnerability

CVE-2022-1289

6.5 MEDIUM Published 2022-04-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-404

Description

A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce.

Affected configurations

• tildearrow furnace • tildearrow furnace 0.2 • tildearrow furnace 0.2.1 • tildearrow furnace 0.2.2 • tildearrow furnace 0.3 • tildearrow furnace 0.3.1 • tildearrow furnace 0.4 • tildearrow furnace 0.4.1 • tildearrow furnace 0.4.2 • tildearrow furnace 0.4.3 • tildearrow furnace 0.4.4 • tildearrow furnace 0.4.5 • tildearrow furnace 0.4.6 • tildearrow furnace 0.4.7 • tildearrow furnace 0.5 • tildearrow furnace 0.5.1 • tildearrow furnace 0.5.2 • tildearrow furnace 0.5.3 • tildearrow furnace 0.5.4 • tildearrow furnace 0.5.5 • tildearrow furnace 0.5.6 • tildearrow furnace 0.5.7 • tildearrow furnace 0.5.8 • tildearrow furnace 0.6 • tildearrow furnace dev5 • tildearrow furnace dev6 • tildearrow furnace dev7 • tildearrow furnace dev8 • tildearrow furnace dev9 • tildearrow furnace dev10 • tildearrow furnace dev62 • tildearrow furnace dev63 • tildearrow furnace dev64 • tildearrow furnace dev65 • tildearrow furnace dev66 • tildearrow furnace dev67 • tildearrow furnace dev68 • tildearrow furnace dev69 • tildearrow furnace dev70 • tildearrow furnace dev71 • tildearrow furnace dev72 • tildearrow furnace dev73 • tildearrow furnace dev75 • tildearrow furnace dev76 • tildearrow furnace dev77 • tildearrow furnace dev78 • tildearrow furnace dev79 • tildearrow furnace dev80

Related

Weakness · CWE (1)

  • CWE-404 Improper Resource Shutdown or Release weakness

References