Описание
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
Список пакетов
SUSE Linux Enterprise Server 12 SP4-LTSS
u-boot-rpi3-2018.03-4.9.1
u-boot-tools-2018.03-4.9.1
Ссылки
- Link for SUSE-SU-2022:2712-1
- E-Mail link for SUSE-SU-2022:2712-1
- SUSE Security Ratings
- SUSE Bug 1201214
- SUSE CVE CVE-2022-34835 page
Описание
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP4-LTSS:u-boot-rpi3-2018.03-4.9.1
SUSE Linux Enterprise Server 12 SP4-LTSS:u-boot-tools-2018.03-4.9.1
Ссылки
- CVE-2022-34835
- SUSE Bug 1201214