PT-2022-13778 · Unknown+1 · Tildearrow Furnace+1

Mqrsvo · Published 2022-04-10 · Updated 2024-07-29 · CVE-2022-1289

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions tildearrow Furnace versions prior to the patch 0eb02422d5161767e9983bdaa5c429762d3477ce

Description A denial of service issue was discovered, classified as problematic, resulting from an incomplete fix of a previous issue. This issue can be initiated remotely but requires user interaction.

Recommendations For versions prior to the patch 0eb02422d5161767e9983bdaa5c429762d3477ce, apply the patch 0eb02422d5161767e9983bdaa5c429762d3477ce to resolve the issue.

Exploit

Fix

DoS

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

ALT-PU-2023-8442

CVE-2022-1289

Affected Products

Alt Linux

Tildearrow Furnace

References · 6

• 🔥 https://github.com/tildearrow/furnace/issues/325#issuecomment-1094139655 · Exploit
• https://github.com/tildearrow/furnace/commit/0eb02422d5161767e9983bdaa5c429762d3477ce · Patch
• https://osv.dev/vulnerability/CVE-2022-1289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1289 · Security Note
• https://t.me/cibsecurity/40435 · Telegram Post
• https://vuldb.com/?id.196755 · Note