CVE-2022-31135

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-31135
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31135.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-31135
Aliases
  • GHSA-vj86-vfmg-q68v
Published
2022-07-07T17:50:11Z
Modified
2026-08-12T13:32:52Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Maliciously crafted evidence packet may cause denial of service
Details

Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Affected versions of Akashi are subject to a denial of service attack. An attacker can use a specially crafted evidence packet to make an illegal modification, causing a server crash. This can be used to mount a denial-of-service exploit. Users are advised to upgrade. There is no known workaround for this issue.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-129"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31135.json"
}
References

Affected packages

Git / github.com/attorneyonline/akashi

Affected ranges

Type
GIT
Repo
https://github.com/attorneyonline/akashi
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
30b769b282493b8a49ed6ac321158cc697d63792
Fixed
5566cdfedddef1f219aee33477d9c9690bf2f78b
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:aceattorneyonline:akashi:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.4"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

1.*
1.3
Other
apircot-r2
apricot-r1
apricot-r2hf1
banana
banana-1.*
banana-1.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31135.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "function_hash": "231812901080100873780381918415180059258",
            "length": 388
        },
        "id": "CVE-2022-31135-145b9a6a",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/attorneyonline/akashi/commit/5566cdfedddef1f219aee33477d9c9690bf2f78b",
        "target": {
            "file": "core/src/packets.cpp",
            "function": "AOClient::pktEditEvidence"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "295076535188173281190418903555524729956",
            "length": 1029
        },
        "id": "CVE-2022-31135-1bbc793d",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/attorneyonline/akashi/commit/30b769b282493b8a49ed6ac321158cc697d63792",
        "target": {
            "file": "akashi/main.cpp",
            "function": "main"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "102839844799658597090051715153399211427",
                "144254583697261399826913154656555680812",
                "51509729987968071159005150830792737716",
                "118326743271685496595389188824628458283",
                "132223447831308340869071655830078571270",
                "315542245364453816557130839870832990216",
                "275495404127277087946791197460470843616",
                "249792505178400113383351433494695039646"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-31135-36cba24c",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/attorneyonline/akashi/commit/5566cdfedddef1f219aee33477d9c9690bf2f78b",
        "target": {
            "file": "core/src/packets.cpp"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "243447359895889683720732715852787692521",
            "length": 325
        },
        "id": "CVE-2022-31135-90c40562",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/attorneyonline/akashi/commit/5566cdfedddef1f219aee33477d9c9690bf2f78b",
        "target": {
            "file": "core/src/packets.cpp",
            "function": "AOClient::pktRemoveEvidence"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "88390923370593889521737468942085941644",
                "276424739206198600642156068648874419757",
                "1951351783190270214908866419223650532",
                "337410073785668219835905358400024910719"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2022-31135-dcfb84f2",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/attorneyonline/akashi/commit/30b769b282493b8a49ed6ac321158cc697d63792",
        "target": {
            "file": "akashi/main.cpp"
        }
    }
]
vanir_signatures_modified 
"2026-08-12T13:32:52Z"