Wind River Support Network

HomeDefectsLINCD-9609

Fixed

LINCD-9609 : Security Advisory - dlt-daemon - CVE-2022-31291

Created: Jun 16, 2022 Updated: Jul 20, 2022

Resolved Date: Jul 17, 2022

Found In Version: 10.20.6.0

Fix Version: 10.22.29.0

Severity: Standard

Applicable for: Wind River Linux CD

Component/s: Userspace

Description

An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets.

CREATE(Triage):(User=admin) CVE-2022-31291 (https://nvd.nist.gov/vuln/detail/CVE-2022-31291)

CVEs

CVE-2022-31291