CVE-2022-29077

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-29077
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29077.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-29077
Published
2022-04-25T03:15:07Z
Modified
2025-10-21T07:01:00.554932Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node, which may lead to XRPL mainnet DoS or compromise. This exposes all digital assets on the XRPL to a security threat.

References

Affected packages

Git / github.com/ripple/rippled

Affected ranges

Type
GIT
Repo
https://github.com/ripple/rippled
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
72377e7bf25c4eaee5174186d2db3c6b4210946f

Affected versions

0.*

0.12.0
0.14.0
0.15.0
0.16.0
0.17.0
0.18.0
0.19.0
0.19.1
0.19.2
0.20.0
0.20.1
0.21.0
0.22.0
0.23.0
0.24.0
0.25.0
0.25.1
0.25.2
0.26.0
0.26.1
0.26.2
0.26.3-sp1
0.26.3-sp4
0.26.4
0.26.4-sp1
0.26.4-sp2
0.26.4-sp3
0.27.0
0.27.1
0.27.1-rc1
0.27.2
0.27.3
0.27.3-sp1
0.27.3-sp2
0.27.4
0.28.0
0.28.0-rc1
0.28.1
0.28.1-rc1
0.28.1-rc2
0.28.2
0.29.0
0.29.0-hf1
0.29.1-rc1
0.30.0
0.30.0-hf1
0.30.0-hf2
0.30.0-rc1
0.30.1
0.30.1-hf1
0.30.1-hf2
0.30.1-rc1
0.30.1-rc2
0.31.0
0.31.2
0.32.0
0.32.1
0.33.0
0.33.0-hf1
0.40.0
0.40.1
0.50.0
0.50.0-rc1
0.50.0-rc2
0.50.2
0.60.0
0.60.1
0.60.2
0.60.3
0.70.0
0.70.1
0.70.2
0.80.0
0.80.1
0.80.2
0.81.0
0.90.0
0.90.1

1.*

1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.2.0
1.2.1
1.2.2
1.2.3
1.2.4
1.3.0
1.3.1
1.4.0
1.5.0
1.6.0
1.7.0
1.7.2
1.7.3
1.8.1
1.8.2
1.8.3
1.8.4

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/ripple/rippled/commit/72377e7bf25c4eaee5174186d2db3c6b4210946f",
        "target": {
            "file": "src/ripple/protocol/impl/BuildInfo.cpp"
        },
        "deprecated": false,
        "signature_version": "v1",
        "id": "CVE-2022-29077-d0b8310c",
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "210707397357993739812613116987614333685",
                "307464896027562437958032019526306783295",
                "296022353296152264758262536646395275237",
                "199657875885241300211392053013559564544"
            ]
        }
    }
]