Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c2cp-78ww-6jm8

Опубликовано: 19 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

EPSS

Процентиль: 26%
0.00116
Низкий

7.1 High

CVSS3

Дефекты

CWE-193

Связанные уязвимости

CVSS3: 7.1
ubuntu
9 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

CVSS3: 7.1
nvd
9 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

msrc
3 месяца назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

CVSS3: 7.1
debian
9 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-on ...

CVSS3: 7.1
fstec
9 месяцев назад

Уязвимость функции sqfs_search_dir реализации алгоритма дефрагментации IP-пакетов загрузчика U-Boot, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 26%
0.00116
Низкий

7.1 High

CVSS3

Дефекты

CWE-193