Wind River Support Network

HomeDefectsLIN1021-6387

Fixed

LIN1021-6387 : Security Advisory - perl - CVE-2022-48522

Created: Aug 22, 2023 Updated: Sep 6, 2023

Resolved Date: Sep 6, 2023

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

CREATE(Triage):(User=admin) CVE-2022-48522 (https://nvd.nist.gov/vuln/detail/CVE-2022-48522)