← Database

CVE-2022-27882

HIGH CVSS: 7.5 Published: 2022-03-25 Modified: 2026-06-17

Description

slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation.

Affected Platforms

Openbsd Openbsd

Weakness Type

CWE-681

References