Vulnerability · Published Apr 25, 2022 · Assigned by mitre
CVE-2022-29077
Critical 9.8
In plain English
A critical-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.2% (higher than 83% of all known vulnerabilities).
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)2.2%top 17.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node, which may lead to XRPL mainnet DoS or compromise. This exposes all digital assets on the XRPL to a security threat.
Affected products (as reported)
References
- https://ripple.com/ x_refsource_MISC
- https://github.com/ripple/rippled/compare/1.8.4...1.8.5 x_refsource_MISC
- https://xrpl.org/blog/2022/rippled-1.8.5.html x_refsource_MISC