{"id":"CVE-2022-27240","details":"scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion.","modified":"2026-08-12T13:01:14.279744Z","published":"2022-03-18T05:55:25Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27240.json"},"references":[{"type":"WEB","url":"https://github.com/babelouest/glewlwyd/releases/tag/v2.6.2"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27240.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27240"},{"type":"FIX","url":"https://github.com/babelouest/glewlwyd/commit/4c5597c155bfbaf6491cf6b83479d241ae66940a"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/babelouest/glewlwyd","events":[{"introduced":"9ff7a039b873666099ad306bef0c13082902d39a"},{"fixed":"d147ccd0c493b1fad5a2bcd2a9a5c6d3fda9ae1c"},{"fixed":"4c5597c155bfbaf6491cf6b83479d241ae66940a"}],"database_specific":{"cpe":"cpe:2.3:a:glewlwyd_sso_server_project:glewlwyd_sso_server:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.0.0"},{"fixed":"2.6.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v2.6.1","v2.6.0","v2.5.3","v2.5.2","v2.5.1","v2.5.0","v2.4.0","v2.3.2","v2.3.1","v2.3.0","v2.2.0","v2.1.1","v2.1.0","v2.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27240.json","vanir_signatures_modified":"2026-08-12T13:01:14Z","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/babelouest/glewlwyd/commit/4c5597c155bfbaf6491cf6b83479d241ae66940a","target":{"file":"src/scheme/webauthn.c"},"deprecated":false,"digest":{"line_hashes":["220808046081210396080077479638927040481","57273834636401937923658788307504268900","313108989129243707049059965441053762188","228164923958231496861717270284664263050","234309396422907365673195692716210437506","231881941146739342230003207148563531694","169004794240369310944560637058773310332","336525734495495921256508124459061621204"],"threshold":0.9},"id":"CVE-2022-27240-63f1fb6a"},{"target":{"file":"src/scheme/webauthn.c","function":"check_assertion"},"deprecated":false,"digest":{"length":10261,"function_hash":"57275488854267954372487593094167411292"},"id":"CVE-2022-27240-9a76c3ff","signature_type":"Function","signature_version":"v1","source":"https://github.com/babelouest/glewlwyd/commit/4c5597c155bfbaf6491cf6b83479d241ae66940a"}]}}],"schema_version":"1.9.0"}