What’s Vulnerable › Vulnerabilities

CVE-2022-38221

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-15 · updated 2026-06-17
• Weakness: CWE-120

Description

A buffer overflow in the FTcpListener thread in The Isle Evrima (the dedicated server on Windows and Linux) 0.9.88.07 before 2022-08-12 allows a remote attacker to crash any server with an accessible RCON port, or possibly execute arbitrary code.

Affected products

• The Isle Evrima Project The Isle Evrima: before 2022-08-12 — fixed in 2022-08-12

How to fix

Upgrade to a fixed version: The Isle Evrima Project The Isle Evrima 2022-08-12. Check the vendor advisory for mitigations.

References

• https://takethebait.net/discovering-a-buffer-overflow-in-the-isle-evrima-dedicated-server/
• https://takethebait.net/discovering-a-buffer-overflow-in-the-isle-evrima-dedicated-server/

Get alerted when CVE-2022-38221 or the next vulnerability affects your stack