Critical · published September 10, 2025
🔥 A crafty oversized token can crash your server and lead to remote code execution! 😱 Think of it like a crowded bus that can't handle one more passenger — too many people trying to squeeze in causes a chaotic crash, and in this case, it opens up a sneaky route for an attacker to take control. An attacker could exploit this vulnerability by sending a specially crafted `CA_SSO_LOGIN_REQ`, leading to an immediate denial of service by crashing the login server. If they're crafty enough, they could even execute arbitrary code, wreaking havoc on your MMORPG server!
Think of it like a crowded bus that can't handle one more passenger — too many people trying to squeeze in causes a chaotic crash, and in this case, it opens up a sneaky route for an attacker to take control. CVE-2025-58447 is a heap-based buffer overflow in the rAthena login server, allowing remote attackers to overwrite adjacent session fields with an oversized token length, ultimately causing a crash and potential remote code execution.
An attacker could exploit this vulnerability by sending a specially crafted `CA_SSO_LOGIN_REQ`, leading to an immediate denial of service by crashing the login server. If they're crafty enough, they could even execute arbitrary code, wreaking havoc on your MMORPG server! Patch your rAthena server to commit 2f5248b immediately to close this critical vulnerability. It's essential to monitor your server for unusual requests that resemble the exploitation pattern. Regularly audit your system for other possible weaknesses as well! You've got this! With a quick patch, your server will be back in action, safer than ever! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| rathena/rathena | < 2025-09-06 | 2025-09-06 |