CVE-2022-40016 Use after free in n/a
Attackers can cause a denial of service in ireader media-server via a use-after-free flaw in the librtmp component.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-40016?
CVE-2022-40016 is a high-severity use after free vulnerability in n/a, published on 15 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Use After Free (UAF) vulnerability in ireader media-server before commit 3e0f63f1d3553f75c7d4eb32fa7c7a1976a9ff84 in librtmp, allows attackers to cause a denial of service.
Weakness: CWE-416
Which versions are affected by CVE-2022-40016?
It affects 1 product.
Products include Media-Server Project Media-Server.
How do I fix CVE-2022-40016?
No fix has been published for CVE-2022-40016 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2022-40016 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-40016 exists.
Sources
Also known as GHSA-7m6h-9635-ggwf.