{"id":"CVE-2022-0324","aliases":["EUVD-2022-15492","GHSA-cq4f-m4r6-7827"],"status":"published","title":"Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)","description":"There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown.\n\nDiscovered by Eugene Lim of GovTech Singapore.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01255,"percentile":0.69696,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-120","CWE-787"],"published":"2022-11-14T16:08:34Z","modified":"2026-06-17T04:20:23Z","exploits":[{"source":"pocgithub","id":"ngtuonghung/CVE-2022-0324","title":"ngtuonghung/CVE-2022-0324","date":"2025-11-09","url":"https://github.com/ngtuonghung/CVE-2022-0324"}],"products":[{"vendor":"linux foundation","product":"software for open networking in the cloud (sonic)"},{"vendor":"linuxfoundation","product":"software_for_open_networking_in_the_cloud"},{"vendor":"microsoft","product":"software for open networking in the cloud (sonic)"}],"references":[{"url":"https://github.com/sonic-net/sonic-buildimage/security/advisories/GHSA-m4qf-8rrq-mph9","tags":["x_transferred","Third Party Advisory"]},{"url":"https://govtech-csg.github.io/security-advisories/2022/11/14/CVE-2022-0324.html","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0324"},{"url":"https://github.com/advisories/GHSA-cq4f-m4r6-7827"}],"sources":{"cve":[{"id":"CVE-2022-0324","title":"Buffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)","description":"There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown.\n\nDiscovered by Eugene Lim of GovTech Singapore.\n","status":"published","published":"2022-11-14T16:08:34.224Z","modified":"2025-04-30T13:37:45.488Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:34:41.34666Z"}],"euvd":[{"id":"EUVD-2022-15492","description":"There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown.\n\nDiscovered by Eugene Lim of GovTech Singapore.\n","status":"published","published":"2022-11-14T16:08:34Z","modified":"2025-04-30T13:37:45Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:51:59.458406Z"}],"ghsa":[{"id":"GHSA-cq4f-m4r6-7827","title":"There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker...","description":"There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown. Discovered by Eugene Lim of GovTech Singapore.","status":"published","published":"2022-11-14T19:00:19Z","modified":"2023-01-28T05:03:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:43:56.116009Z"}],"nvd":[{"id":"CVE-2022-0324","description":"There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown.\n\nDiscovered by Eugene Lim of GovTech Singapore.\n","status":"published","published":"2022-11-14T17:15:09.987Z","modified":"2026-06-17T04:20:23.957Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-120","CWE-787"],"updated_at":"2026-11-02T14:07:31.914793Z"}]}}