Severity by source
Network-reachable service (AV:N), but reentrancy timing dependency raises complexity (AC:H); PR:N assumed as client connections may not require credentials, pending confirmation.
Lifecycle Timeline
1DescriptionCVE.org
[GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion]
AnalysisAI
Use-after-free via reentrant client deletion in svxreflector (SvxLink) allows a network-connected client to trigger memory corruption by initiating a disconnect sequence during an already-in-progress client deletion callback. The affected component is the SvxLink conference reflector server used in amateur radio linking systems. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The vulnerability requires a network-accessible svxreflector instance - the service must be reachable from the attacker. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Risk signals for this vulnerability are sparse: no CVSS vector, no EPSS score, no KEV status, and no POC availability data were provided in the input, making quantitative risk comparison impossible. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A remote client connects to the svxreflector network service and sends a sequence of requests or disconnect events timed to trigger simultaneous deletion callbacks on the same client object. The resulting use-after-free corrupts process memory, causing a crash or, if memory layout is favorable to the attacker, potentially redirecting execution flow. … |
| Remediation | No exact patch version was provided in the input data, so a specific upgrade target cannot be confirmed. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today