What’s Vulnerable › Vulnerabilities

CVE-2022-45474

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-11-18 · updated 2026-06-17
• Weakness: CWE-416

Description

drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.

Affected products

• Drachtio-Server: 0.8.18

References

• https://github.com/drachtio/drachtio-server/commit/860f025468feb31c43227153d8fb3f34210a522e
• https://github.com/drachtio/drachtio-server/issues/240
• https://github.com/drachtio/drachtio-server/commit/860f025468feb31c43227153d8fb3f34210a522e
• https://github.com/drachtio/drachtio-server/issues/240

Get alerted when CVE-2022-45474 or the next vulnerability affects your stack