Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:2666-1

Опубликовано: 04 авг. 2022
Источник: suse-cvrf

Описание

Security update for u-boot

This update for u-boot fixes the following issues:

  • CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).

Список пакетов

SUSE Linux Enterprise Server 12 SP5
u-boot-rpi3-2019.01-5.11.1
u-boot-tools-2019.01-5.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
u-boot-rpi3-2019.01-5.11.1
u-boot-tools-2019.01-5.11.1

Ссылки

Описание

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.11.1
SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.11.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.11.1
Ссылки