Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-33967

Опубликовано: 20 июл. 2022
Источник: ubuntu
Приоритет: medium
CVSS3: 7.8

Описание

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.

РелизСтатусПримечание
bionic

released

2020.10+dfsg-1ubuntu0~18.04.3
devel

not-affected

2022.07+dfsg-1ubuntu4
esm-infra/bionic

released

2020.10+dfsg-1ubuntu0~18.04.3
esm-infra/focal

released

2021.01+dfsg-3ubuntu0~20.04.5
esm-infra/xenial

needs-triage

focal

released

2021.01+dfsg-3ubuntu0~20.04.5
impish

ignored

end of life
jammy

released

2022.01+dfsg-2ubuntu2.3
kinetic

not-affected

2022.07+dfsg-1ubuntu4
lunar

not-affected

2022.07+dfsg-1ubuntu4

Показывать по

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
больше 3 лет назад

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.

msrc
5 месяцев назад

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.

CVSS3: 7.8
debian
больше 3 лет назад

squashfs filesystem implementation of U-Boot versions from v2020.10-rc ...

CVSS3: 7.8
github
больше 3 лет назад

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.

suse-cvrf
больше 3 лет назад

Security update for u-boot

7.8 High

CVSS3