CVE-2022-34970
Published: 04 August 2022
Summary
CVE-2022-34970 is a critical-severity Off-by-one Error (CWE-193) vulnerability in Crowcpp Crow. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 3.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
Crow before version 1.0+4 contains a heap-based buffer overflow in the qs_parse function within query_string.h. The flaw is tracked as CVE-2022-34970 and carries a CVSS 3.1 score of 9.8, reflecting network-accessible, unauthenticated attack conditions that can result in full confidentiality, integrity, and availability impact.
An unauthenticated remote attacker can supply a crafted query string that triggers the overflow, enabling arbitrary code execution in the context of the Crow service process. No user interaction or elevated privileges are required for successful exploitation.
The maintainers resolved the issue in pull request 486, and the corrected code is included in the official v1.0+4 release; organizations should upgrade affected deployments to this version to eliminate the vulnerable parsing routine. The associated EPSS score reached a peak of 0.2959 before receding to its current value of 0.2399.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-37872
Vulnerability details
Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerability allows attackers to remotely execute arbitrary code in the context of the vulnerable service.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.