Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-57259

Опубликовано: 18 фев. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.1

Описание

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

РелизСтатусПримечание
devel

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

esm-infra/xenial

needs-triage

focal

ignored

end of standard support, was needs-triage
jammy

needs-triage

noble

needs-triage

oracular

ignored

end of life, was needs-triage
plucky

needs-triage

questing

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

needs-triage

noble

needs-triage

oracular

ignored

end of life, was needs-triage
plucky

needs-triage

questing

DNE

Показывать по

EPSS

Процентиль: 26%
0.00116
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
nvd
9 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

msrc
3 месяца назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

CVSS3: 7.1
debian
9 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-on ...

CVSS3: 7.1
github
9 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

CVSS3: 7.1
fstec
9 месяцев назад

Уязвимость функции sqfs_search_dir реализации алгоритма дефрагментации IP-пакетов загрузчика U-Boot, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 26%
0.00116
Низкий

7.1 High

CVSS3

Уязвимость CVE-2024-57259