CVE-2022-4066

HIGH 8.2CVE-2022-4066 · Published 19/11/2022 · updated 17/06/2026

In short

CVE-2022-4066 is a HIGH (CVSS 8.2) vulnerability affecting onion (onion project).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.7% of all vulnerabilities.
Fix: update to 2022-09-05 or later.

Package	Affected versions	Patched versions
onion onion_project	`< 2022-09-05`	`2022-09-05`

Description

A vulnerability was found in davidmoreno onion. It has been rated as problematic. Affected by this issue is the function onion_response_flush of the file src/onion/response.c of the component Log Handler. The manipulation leads to allocation of resources. The name of the patch is de8ea938342b36c28024fd8393ebc27b8442a161. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-214028.

References

davidmoreno/onion commit de8ea93 · Patch
davidmoreno/onion#308 · Exploit
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free