CVE-2022-30292: Buffer Overflow
Published May 4, 2022
·Updated
Heap-based buffer overflow in sqbaselib.cpp in SQUIRREL 3.2 due to lack of a certain sqreservestack call.
Affected Software
5 affected componentsFixes available
Squirrel-lang Squirrel=3.2
Fedoraproject Fedora=35
Fedoraproject Fedora=36
debian/squirrel3<3.1-8.2
3.1-8.2
debian/squirrel3
3.1-8.2+deb13u13.1-8.5
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/squirrel3to a version that resolves this vulnerability.Fixed in 3.1-8.2 - Upgrade
Upgrade
debian/squirrel3to a version that resolves this vulnerability.Fixed in 3.1-8.2+deb13u1Fixed in 3.1-8.5
Event History
May 4, 2022
CVE Published
via MITRE·10:53 PM
Data Sourced
via MITRE·10:53 PM
Description
Data Sourced
via OSV·11:15 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-30292?
The severity of CVE-2022-30292 is critical (10).
2
How does CVE-2022-30292 affect SQUIRREL 3.2?
CVE-2022-30292 affects SQUIRREL 3.2 through a heap-based buffer overflow in sqbaselib.cpp.
3
How does CVE-2022-30292 affect Fedora 35?
CVE-2022-30292 affects Fedora 35 through a heap-based buffer overflow in sqbaselib.cpp.
4
How does CVE-2022-30292 affect Fedora 36?
CVE-2022-30292 affects Fedora 36 through a heap-based buffer overflow in sqbaselib.cpp.
5
How can I fix CVE-2022-30292?
To fix CVE-2022-30292, update to the latest version of SQUIRREL or Fedora depending on the affected software.