CVE-2022-27240

scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-03-18

Last modified

2024-08-03

Weaknesses

CWE-120

Affected products

• Glewlwyd Sso Server (Glewlwyd Sso Server Project)

References

• https://github.com/babelouest/glewlwyd/commit/4c5597c155bfbaf6491cf6b83479d241ae66940a
• https://github.com/babelouest/glewlwyd/releases/tag/v2.6.2