CVE-2022-30552: Buffer Overflow

Q: What is CVE-2022-30552?

CVE-2022-30552 is a vulnerability in Das U-Boot 2022.01 that allows for a buffer overflow.

Q: What is the severity of CVE-2022-30552?

CVE-2022-30552 has a severity rating of medium (5.5).

Q: How does CVE-2022-30552 affect Das U-Boot 2022.01?

CVE-2022-30552 affects Das U-Boot 2022.01 with a buffer overflow vulnerability.

Q: How can I fix CVE-2022-30552?

To fix CVE-2022-30552, it is recommended to update to the latest version of Das U-Boot.

Q: Where can I find more information about CVE-2022-30552?

You can find more information about CVE-2022-30552 at the following references: [link1](https://github.com/u-boot/u-boot/tags), [link2](https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/).

Published Jun 8, 2022

Updated

Das U-Boot 2022.01 has a Buffer Overflow.

Affected Software

10 affected componentsFixes available

ubuntu/u-boot<2020.10+dfsg-1ubuntu0~18.04.3

2020.10+dfsg-1ubuntu0~18.04.3

ubuntu/u-boot<2021.01+dfsg-3ubuntu0~20.04.5

2021.01+dfsg-3ubuntu0~20.04.5

ubuntu/u-boot<2022.01+dfsg-2ubuntu2.3

2022.01+dfsg-2ubuntu2.3

ubuntu/u-boot-nezha<2022.04+

2022.04+

ubuntu/u-boot-nezha<2022.10-1089-

2022.10-1089-

DENX U-Boot=2022.01

debian/u-boot<2022.07+dfsg-1

2022.07+dfsg-1

debian/u-boot<2022.07+dfsg-1

2022.07+dfsg-1

debian/u-boot<2022.07+dfsg-1

2022.07+dfsg-1

debian/u-boot

2023.01+dfsg-2+deb12u32025.01-3+deb13u12025.01-3.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/u-boot to a version that resolves this vulnerability.
Fixed in 2020.10+dfsg-1ubuntu0~18.04.3
Upgrade
Upgrade ubuntu/u-boot to a version that resolves this vulnerability.
Fixed in 2021.01+dfsg-3ubuntu0~20.04.5
Upgrade
Upgrade ubuntu/u-boot to a version that resolves this vulnerability.
Fixed in 2022.01+dfsg-2ubuntu2.3
Upgrade
Upgrade ubuntu/u-boot-nezha to a version that resolves this vulnerability.
Fixed in 2022.04+
Upgrade
Upgrade ubuntu/u-boot-nezha to a version that resolves this vulnerability.
Fixed in 2022.10-1089-
Upgrade
Upgrade debian/u-boot to a version that resolves this vulnerability.
Fixed in 2023.01+dfsg-2+deb12u3Fixed in 2025.01-3+deb13u1Fixed in 2025.01-3.2
Upgrade
Upgrade debian/u-boot to a version that resolves this vulnerability.
Fixed in 2022.07+dfsg-1

Event History

Jun 8, 2022

CVE Published

via Ubuntu·12:00 AM

CVE Published

via MITRE·12:32 PM

Data Sourced

via MITRE·12:32 PM

Description

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Data Sourced

via OSV·01:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-4150-1

Frequently Asked Questions

What is CVE-2022-30552?

CVE-2022-30552 is a vulnerability in Das U-Boot 2022.01 that allows for a buffer overflow.

What is the severity of CVE-2022-30552?

CVE-2022-30552 has a severity rating of medium (5.5).

How does CVE-2022-30552 affect Das U-Boot 2022.01?

CVE-2022-30552 affects Das U-Boot 2022.01 with a buffer overflow vulnerability.

How can I fix CVE-2022-30552?

To fix CVE-2022-30552, it is recommended to update to the latest version of Das U-Boot.

Where can I find more information about CVE-2022-30552?

You can find more information about CVE-2022-30552 at the following references: [link1](https://github.com/u-boot/u-boot/tags), [link2](https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/).

CVE-2022-30552: Buffer Overflow

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is CVE-2022-30552?

What is the severity of CVE-2022-30552?

How does CVE-2022-30552 affect Das U-Boot 2022.01?

How can I fix CVE-2022-30552?

Where can I find more information about CVE-2022-30552?

Company

Resources

Contact