Lucene search
GoogleOSV:CVE-2022-2347HistorySep 23, 2022 - 1:15 p.m.
CVE-2022-2347
2022-09-2313:15:10
Google
osv.dev
11
uboot
usb
dfu
attacker
buffer
vulnerability
software
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a wLength greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
| CPE | Name | Operator | Version |
|---|---|---|---|
| u-boot | eq | 2015.04 | |
| u-boot | eq | 2016.07-rc2 | |
| u-boot | eq | 2017.07-rc2 | |
| u-boot | eq | 2019.10-rc4 | |
| u-boot | eq | 2021.01-rc1 | |
| u-boot | eq | 2022.01-rc2 | |
| u-boot | eq | 2021.07-rc4 | |
| u-boot | eq | 2017.05-rc1 | |
| u-boot | eq | 2018.01 | |
| u-boot | eq | 2017.11-rc3 |
References
Related
prion
prion
Cross site request forgery (csrf)
2022-09-23 13:15:00
alpinelinux
alpinelinux
CVE-2022-2347
2022-09-23 13:15:10
debiancve
debiancve
CVE-2022-2347
2022-09-23 13:15:10
cve
cve
CVE-2022-2347
2022-09-23 13:15:10
cvelist
cvelist
CVE-2022-2347 Unchecked Download size in Uboot
2022-07-07 00:00:00
ubuntucve
ubuntucve
CVE-2022-2347
2022-09-23 00:00:00
nvd
nvd
CVE-2022-2347
2022-09-23 13:15:10
veracode
veracode
Denial Of Service (DoS)
2023-03-12 20:36:44
osv
osv
u-boot-nezha vulnerability
2023-11-29 13:41:02
u-boot vulnerabilities
2022-12-06 12:54:01
nessus
nessus
Ubuntu 22.04 LTS / 23.04 : u-boot-nezha vulnerability (USN-6523-1)
2023-11-29 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6523-1)
2023-11-30 00:00:00
Ubuntu: Security Advisory (USN-5764-1)
2022-12-07 00:00:00
ubuntu
ubuntu
u-boot-nezha vulnerability
2023-11-29 00:00:00
U-Boot vulnerabilities
2022-12-06 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0329
2023-02-08 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0528
2023-02-08 00:00:00