Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5cmq-wrwp-9x26

Опубликовано: 19 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

EPSS

Процентиль: 26%
0.00116
Низкий

7.1 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.1
ubuntu
9 месяцев назад

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

CVSS3: 7.1
nvd
9 месяцев назад

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

msrc
3 месяца назад

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

CVSS3: 7.1
debian
9 месяцев назад

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025. ...

CVSS3: 7.1
fstec
9 месяцев назад

Уязвимость функции sqfs_resolve_symlink загрузчика U-Boot, позволяющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 26%
0.00116
Низкий

7.1 High

CVSS3

Дефекты

CWE-190