CVE-2022-29077

Critical

Description

A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or execute commands remotely on a rippled node, which may lead to XRPL mainnet DoS or compromise. This exposes all digital assets on the XRPL to a security threat.

SeverityCritical
CVSS9.8
Exploit probability—
ProductRippled
PublishedApr 25, 2022
First seenApr 25, 2022

How to fix

Update
  • ripple rippled1.8.5 or later

Affected products

ProductAffected versionsFixed in
ripple rippledv < 1.8.51.8.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.