Vulnerability · Published Jul 7, 2022 · Assigned by GitHub_M
CVE-2022-31135Maliciously crafted evidence packet may cause denial of service
Medium 6.5
In plain English
A medium-severity security flaw in akashi from AttorneyOnline. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Official description
Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Affected versions of Akashi are subject to a denial of service attack. An attacker can use a specially crafted evidence packet to make an illegal modification, causing a server crash. This can be used to mount a denial-of-service exploit. Users are advised to upgrade. There is no known workaround for this issue.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AttorneyOnline | akashi | < 1.4 |
Weakness: CWE-129 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H