PT-2022-20555 · Akashi · Akashi

Oldmud0 · Published 2022-07-07 · Updated 2022-07-15 · CVE-2022-31135

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Akashi (affected versions not specified)

Description The issue affects Akashi, an open source server implementation of the Attorney Online video game. It is subject to a denial of service attack, where an attacker can use a specially crafted evidence packet to make an illegal modification, causing a server crash. This can be used to mount a denial-of-service exploit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

CVE-2022-31135

GHSA-VJ86-VFMG-Q68V

Affected Products

Akashi

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31135.json · Exploit
• https://github.com/AttorneyOnline/akashi/commit/5566cdfedddef1f219aee33477d9c9690bf2f78b · Patch
• https://osv.dev/vulnerability/CVE-2022-31135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31135 · Security Note
• https://github.com/AttorneyOnline/akashi/security/advisories/GHSA-vj86-vfmg-q68v · Note
• https://t.me/cibsecurity/45762 · Telegram Post