Known vulnerabilities in Drachtio Server 0.8.17-rc1

Vendor: drachtio

Software: Drachtio Server

Version: 0.8.17-rc1

Software CPE: cpe:2.3:a:drachtio:drachtio-server:*:*:*:*:*:*:*:*

Website: https://github.com/drachtio

Total vulnerabilities: 6

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (6)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU73167 - Improper input validation CVE-2022-47515	CWE-20	Medium	No	No	0.8.20	08.03.2023	SB2023030816
#VU73166 - Reachable Assertion CVE-2022-47516	CWE-617	Medium	No	No	0.8.20	08.03.2023	SB2023030816 SB2023030820 SB2023052442 and 2 more
#VU73158 - Off-by-one Error CVE-2022-47517	CWE-193	Medium	No	No	0.8.19	08.03.2023	SB2023030814
#VU73157 - Out-of-bounds read CVE-2022-45909	CWE-125	Medium	No	No	0.8.19	08.03.2023	SB2023030814
#VU73156 - Incorrect Default Permissions CVE-2022-45473	CWE-276	Low	No	No	0.8.18	08.03.2023	SB2023030813
#VU73155 - Use After Free CVE-2022-45474	CWE-416	High	No	No	0.8.18	08.03.2023	SB2023030813