CVE-2022-35505

Published: Aug 3, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client to the server. This occurs because there is no limit to the length of the output of the executed command.

Affected (1)

Products: Triplecross Project: Triplecross

Triplecross Project

1 product

Triplecross

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Triplecross Project Triplecross	Version 0.1.0

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://github.com/h3xduck/TripleCross/issues/40

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/h3xduck/TripleCross/issues/40

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.