Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vmjq-93g5-fvqc

Опубликовано: 19 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

EPSS

Процентиль: 26%
0.00116
Низкий

7.1 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.1
ubuntu
9 месяцев назад

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

CVSS3: 7.1
nvd
9 месяцев назад

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

msrc
3 месяца назад

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

CVSS3: 7.1
debian
9 месяцев назад

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.0 ...

CVSS3: 7.1
fstec
9 месяцев назад

Уязвимость функции ext4fs_read_symlink загрузчика U-Boot, позволяющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 26%
0.00116
Низкий

7.1 High

CVSS3

Дефекты

CWE-190