Cette page suit l'état du correctif pour Ubuntu. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2022-2347 →
UBUNTU-CVE-2022-2347
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a wLength greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Ubuntu:Pro:16.04:LTS
u-boot
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Ubuntu:18.04:LTS
u-boot
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.10+dfsg-1ubuntu0~18.04.3"}]}]
Ubuntu:20.04:LTS
u-boot
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01+dfsg-3ubuntu0~20.04.5"}]}]
Ubuntu:22.04:LTS
u-boot
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.01+dfsg-2ubuntu2.3"}]}]
Ubuntu:22.04:LTS
u-boot-nezha
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.04+git20220405.7446a472-0ubuntu0.4"}]}]
Ubuntu:24.04:LTS
u-boot-nezha
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Références
- advisory ubuntu.com
- advisory ubuntu.com
- report ubuntu.com
- report openwall.com
- report cve.org