CVE-2022-27882

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-681

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://blog.quarkslab.com/heap-overflow-in-openbsds-slaacd-via-router-advertisement.htmlExploit, Third Party Advisory
https://ftp.openbsd.org/pub/OpenBSD/patches/6.9/common/033_slaacd.patch.sigPatch, Release Notes, Vendor Advisory
https://ftp.openbsd.org/pub/OpenBSD/patches/7.0/common/017_slaacd.patch.sigPatch, Release Notes, Vendor Advisory
https://security.netapp.com/advisory/ntap-20220506-0005/Third Party Advisory
https://blog.quarkslab.com/heap-overflow-in-openbsds-slaacd-via-router-advertisement.htmlExploit, Third Party Advisory
https://ftp.openbsd.org/pub/OpenBSD/patches/6.9/common/033_slaacd.patch.sigPatch, Release Notes, Vendor Advisory
https://ftp.openbsd.org/pub/OpenBSD/patches/7.0/common/017_slaacd.patch.sigPatch, Release Notes, Vendor Advisory
https://security.netapp.com/advisory/ntap-20220506-0005/Third Party Advisory

Timeline

Published: Mar 25, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-278837.3A link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to create a specially-crafted file as a symlink CVE-2022-278846.1Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/plog/index.html via the wd par CVE-2022-278856.1Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/website/data.html via CVE-2022-278866.1Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/ulog/index.html via the wd par CVE-2022-278876.1Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.html via the repeat p CVE-2022-278885.5Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information (session tokens).CVE-2022-278899.1The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization ope CVE-2022-27895.5Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345 Insufficient Verification of Data Authenticity, a CVE-2022-278907.4It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory CVE-2022-278915.3Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected serv CVE-2022-278927.5Palantir Gotham versions prior to 3.22.11.2 included an unauthenticated endpoint that would have allowed an attacker to exhaust the memory o CVE-2022-278934.2The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authenticati