Unrated

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing beca...

CVE-2024-57259 First seen on SecPulse Feb 18, 2025

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-57259 u-boot Fixed in: 2021.01+dfsg-5+deb11u1
Ubuntu UBUNTU-CVE-2024-57259 u-boot

Original description The description as published by the source.

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web lists.debian.org
web source.denx.de
web openwall.com

Key facts

Severity: Unrated
Published: Feb 18, 2025
First seen on SecPulse: Feb 18, 2025
CWE: CWE-193

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05