CVE-2022-27882

Publication date

2022-03-25 17:13:23

Family

mitre

State

PUBLISHED

Description

slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant heap-based buffer overflow triggerable by a crafted IPv6 router advertisement. NOTE: privilege separation and pledge can prevent exploitation.