Wind River Support Network

HomeDefectsLIN1021-3894

Fixed

LIN1021-3894 : Security Advisory - u-boot - CVE-2022-33103

Created: Jul 3, 2022 Updated: Aug 6, 2022

Resolved Date: Aug 6, 2022

Found In Version: 10.21.20.1

Fix Version: 10.21.20.14

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().

CREATE(Triage):(User=admin) CVE-2022-33103 (https://nvd.nist.gov/vuln/detail/CVE-2022-33103)

CVEs

CVE-2022-33103