Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-57259

Опубликовано: 18 фев. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.1

Описание

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

РелизСтатусПримечание
devel

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

esm-infra/xenial

needs-triage

focal

ignored

end of standard support, was needs-triage
jammy

needs-triage

noble

needs-triage

oracular

ignored

end of life, was needs-triage
plucky

ignored

end of life, was needs-triage
questing

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

needs-triage

noble

needs-triage

oracular

ignored

end of life, was needs-triage
plucky

ignored

end of life, was needs-triage
questing

DNE

Показывать по

EPSS

Процентиль: 23%
0.00075
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
nvd
12 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

msrc
5 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

CVSS3: 7.1
debian
12 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-on ...

CVSS3: 7.1
github
12 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

CVSS3: 7.1
fstec
12 месяцев назад

Уязвимость функции sqfs_search_dir реализации алгоритма дефрагментации IP-пакетов загрузчика U-Boot, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 23%
0.00075
Низкий

7.1 High

CVSS3