high7.5
CVE-2022-24700
An issue was discovered in WinAPRS 2.9.0.
Impact
An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a remote attacker to cause a denial of service (daemon crash) via a malicious AX.25 packet over the air. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Winaprs | Winaprs | Version 2.9.0 |