Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-39837

Опубликовано: 25 окт. 2022
Источник: ubuntu
Приоритет: medium
CVSS3: 5.5

Описание

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,

РелизСтатусПримечание
devel

not-affected

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

not-affected

focal

ignored

end of standard support, was needs-triage
jammy

needs-triage

mantic

not-affected

2.18.10-5
noble

not-affected

oracular

not-affected

plucky

not-affected

Показывать по

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
nvd
больше 3 лет назад

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,

CVSS3: 5.5
debian
больше 3 лет назад

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) ...

CVSS3: 5.5
github
больше 3 лет назад

An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,

5.5 Medium

CVSS3

Уязвимость CVE-2022-39837