Critical · 9.8 CVE-2023-49208 EUVD-2023-53212GHSA-x7rh-wvh4-cx6x

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn regist…

Published Nov 23, 2023 · Updated Jun 5, 2025 · Assigned by mitre

Package: glewlwyd Package: glewlwyd Ecosystem: Debian Ecosystem: Ubuntu

Description

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 13	glewlwyd	2.7.6+ds-1	—
Debian 12	glewlwyd	2.7.5-3+deb12u1	—

Ubuntu