Vulnerability Name:

CVE-2022-30552 (CCN-228419)

Assigned:2022-06-03
Published:2022-06-03
Updated:2022-06-16
Summary:Das U-Boot 2022.01 has a Buffer Overflow.
CVSS v3 Severity:5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.7 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Adjacent
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
6.1 Medium (CCN CVSS v2 Vector: AV:A/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Adjacent_Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-120
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2022-30552

Source: XF
Type: UNKNOWN
dasuboot-cve202230552-dos(228419)

Source: MISC
Type: Release Notes, Third Party Advisory
https://github.com/u-boot/u-boot/tags

Source: CCN
Type: NCCGroup Web site
Multiple Vulnerabilities in U-Boot (CVE-2022-30790, CVE-2022-30552)

Source: MISC
Type: Third Party Advisory
https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/

Source: CCN
Type: DENX Web site
Das U-Boot

Vulnerable Configuration:Configuration 1:
  • cpe:/a:denx:u-boot:2022.01:-:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:denx:das_u-boot:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:7820
    P
    		u-boot-rpiarm64-2021.10-150400.4.11.1 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:3614
    P
    		libjbig2-2.0-12.13 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:119417
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:911
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:522
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:118732
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:119602
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:523
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:118922
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:126897
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:95244
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:119227
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:127294
    P
    		Security update for u-boot (Important)
    2022-06-13
    oval:org.opensuse.security:def:6069
    P
    		Security update for u-boot (Important)
    2022-06-13
    BACK
    denx u-boot 2022.01 -
    denx das u-boot -