CVE-2022-27240 scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion.
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/glewlwyd(Debian:12) | < 2.6.1-2 | 2.6.1-2 |
| debian/glewlwyd(Debian:13) | < 2.6.1-2 | 2.6.1-2 |
| ubuntu/glewlwyd(Ubuntu:22.04) | All versions | No fix listed |
| glewlwyd sso server project glewlwyd sso server | >= 2.0.0, < 2.6.2 | 2.6.2 |
References
- Debian Security Tracker CVE-2022-27240 vendor-advisory
- github.com patch third-party-advisory
- github.com release-notes third-party-advisory
- Ubuntu CVE tracker vendor-advisory
- www.cve.org