Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-57259

Опубликовано: 18 фев. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.1

Описание

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

РелизСтатусПримечание
devel

not-affected

2025.10-0ubuntu2
esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

esm-infra/xenial

ignored

end of ESM support, was needs-triage
focal

ignored

end of standard support, was needs-triage
jammy

released

2022.01+dfsg-2ubuntu2.7
noble

released

2025.10-0ubuntu0.24.04.2
oracular

ignored

end of life, was needs-triage
plucky

ignored

end of life, was needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

needs-triage

noble

needs-triage

oracular

ignored

end of life, was needs-triage
plucky

ignored

end of life, was needs-triage
questing

DNE

Показывать по

EPSS

Процентиль: 29%
0.0036
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
nvd
больше 1 года назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

msrc
12 месяцев назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

CVSS3: 7.1
debian
больше 1 года назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-on ...

CVSS3: 7.1
github
больше 1 года назад

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

CVSS3: 7.1
fstec
больше 1 года назад

Уязвимость функции sqfs_search_dir реализации алгоритма дефрагментации IP-пакетов загрузчика U-Boot, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 29%
0.0036
Низкий

7.1 High

CVSS3