Skip to content
OpenAdvisories
Unscored CVE-2022-27882 EUVD-2022-32370GHSA-c83m-wj2v-88pf

slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a c…

Published Mar 25, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation.

Advisories 1

References