Vulnerabilities > CVE-2022-34970 - Off-by-one Error vulnerability in Crowcpp Crow
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 13 |