{"id":"CVE-2022-45474","details":"drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.","modified":"2026-08-12T12:59:17.564883Z","published":"2022-11-18T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45474.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45474.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45474"},{"type":"REPORT","url":"https://github.com/drachtio/drachtio-server/issues/240"},{"type":"FIX","url":"https://github.com/drachtio/drachtio-server/commit/860f025468feb31c43227153d8fb3f34210a522e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/drachtio/drachtio-server","events":[{"introduced":"0be8dc5c9f8414e226cd4f70e22a224cbea0a281"},{"fixed":"860f025468feb31c43227153d8fb3f34210a522e"}],"database_specific":{"cpe":"cpe:2.3:a:drachtio:drachtio-server:0.8.18:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0.8.18"},{"last_affected":"0.8.18"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["0.8.18","v0.8.19-rc11","v0.8.19-rc10","v0.8.19-rc9","v0.8.19-rc8","v0.8.19-rc7","v0.8.19-rc6","v0.8.19-rc5","v0.8.19-rc4","v0.8.19-rc3","v0.8.19-rc2","v0.8.19-rc1","v0.8.18-rc8","v0.8.18"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-45474.json","vanir_signatures_modified":"2026-08-12T12:59:17Z","vanir_signatures":[{"source":"https://github.com/drachtio/drachtio-server/commit/860f025468feb31c43227153d8fb3f34210a522e","target":{"file":"src/request-handler.cpp","function":"RequestHandler::startRequest"},"deprecated":false,"digest":{"function_hash":"275625140252032419450287838823633949408","length":2541},"id":"CVE-2022-45474-244293ac","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/request-handler.cpp"},"deprecated":false,"digest":{"line_hashes":["158483295293576904124825594388491882108","107562715951715056429434249360572888512","55168409675127421493847497555339095056","115414229115053031577244473783664569304","119034032375418284031958587811169853123","276137244779172115892835726057672526782","305138473601715580700316391105548149115","329584203379882597084737539544215708235","333852299709108246174343443841297917218","225435003309004591100027601775260267134","127761345051944576977848658720862124857","271617997259688710728116901100653430858","136653259047622695317827124201165802974","250048289345750954184185833314107129962","75910259603644972785959500693890551595","167934851726581935525374188748344423878","77989704610967883821821799558442323285","75706225434171452274285747211308941689","142853282209738848086845856996194666967"],"threshold":0.9},"id":"CVE-2022-45474-db878204","signature_type":"Line","signature_version":"v1","source":"https://github.com/drachtio/drachtio-server/commit/860f025468feb31c43227153d8fb3f34210a522e"},{"digest":{"function_hash":"218845617964931157765871159169050546266","length":1280},"id":"CVE-2022-45474-e1b0b67b","signature_type":"Function","signature_version":"v1","source":"https://github.com/drachtio/drachtio-server/commit/860f025468feb31c43227153d8fb3f34210a522e","target":{"file":"src/request-handler.cpp","function":"event_cb"},"deprecated":false}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}