PatchTheCVEcherry vulnerabilities and fixes
Recent CVEs affecting cherry, with upgrade or downgrade steps. 1 tracked.
cherry has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-01-05. Highest priority: CVE-2024-22086 (score 61/100).
- CVE-2024-22086 CRITICAL 9.8 UPGRADE handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, l
FAQ
How do I fix cherry vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cherry being exploited right now?
None of the tracked cherry CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cherry CVE should I patch first?
CVE-2024-22086 currently ranks highest (61/100): handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, l.