Vulnerability Description
Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Affected versions of Akashi are subject to a denial of service attack. An attacker can use a specially crafted evidence packet to make an illegal modification, causing a server crash. This can be used to mount a denial-of-service exploit. Users are advised to upgrade. There is no known workaround for this issue.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Aceattorneyonline | Akashi | < 1.4 |
Related Weaknesses (CWE)
References
- https://github.com/AttorneyOnline/akashi/commit/5566cdfedddef1f219aee33477d9c969PatchThird Party Advisory
- https://github.com/AttorneyOnline/akashi/security/advisories/GHSA-vj86-vfmg-q68vIssue TrackingThird Party Advisory
- https://github.com/AttorneyOnline/akashi/commit/5566cdfedddef1f219aee33477d9c969PatchThird Party Advisory
- https://github.com/AttorneyOnline/akashi/security/advisories/GHSA-vj86-vfmg-q68vIssue TrackingThird Party Advisory
FAQ
What is CVE-2022-31135?
CVE-2022-31135 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Akashi is an open source server implementation of the Attorney Online video game based on the Ace Attorney universe. Affected versions of Akashi are subject to a denial of service attack. An attacker ...
How severe is CVE-2022-31135?
CVE-2022-31135 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-31135?
Check the references section above for vendor advisories and patch information. Affected products include: Aceattorneyonline Akashi.