CVE-2022-30790: Buffer Overflow

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-30790.

Q: What is the severity of CVE-2022-30790?

The severity of CVE-2022-30790 is high.

Q: What is the affected software?

The affected software is Das U-Boot 2022.01.

Q: What is the CVE ID for the related issue?

The related issue has the CVE ID CVE-2022-30552.

Q: Are there any references for more information?

Yes, you can find more information at the following references: - [GitHub](https://github.com/u-boot/u-boot/tags) - [NCC Group](https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/)

Published Jun 8, 2022

Updated

Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.

Affected Software

10 affected componentsFixes available

ubuntu/u-boot<2020.10+dfsg-1ubuntu0~18.04.3

2020.10+dfsg-1ubuntu0~18.04.3

ubuntu/u-boot<2021.01+dfsg-3ubuntu0~20.04.5

2021.01+dfsg-3ubuntu0~20.04.5

ubuntu/u-boot<2022.01+dfsg-2ubuntu2.3

2022.01+dfsg-2ubuntu2.3

ubuntu/u-boot-nezha<2022.04+

2022.04+

ubuntu/u-boot-nezha<2022.10-1089-

2022.10-1089-

DENX U-Boot=2022.01

debian/u-boot<2022.07+dfsg-1

2022.07+dfsg-1

debian/u-boot<2022.07+dfsg-1

2022.07+dfsg-1

debian/u-boot<2022.07+dfsg-1

2022.07+dfsg-1

debian/u-boot

2023.01+dfsg-2+deb12u32025.01-3+deb13u12025.01-3.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/u-boot to a version that resolves this vulnerability.
Fixed in 2020.10+dfsg-1ubuntu0~18.04.3
Upgrade
Upgrade ubuntu/u-boot to a version that resolves this vulnerability.
Fixed in 2021.01+dfsg-3ubuntu0~20.04.5
Upgrade
Upgrade ubuntu/u-boot to a version that resolves this vulnerability.
Fixed in 2022.01+dfsg-2ubuntu2.3
Upgrade
Upgrade ubuntu/u-boot-nezha to a version that resolves this vulnerability.
Fixed in 2022.04+
Upgrade
Upgrade ubuntu/u-boot-nezha to a version that resolves this vulnerability.
Fixed in 2022.10-1089-
Upgrade
Upgrade debian/u-boot to a version that resolves this vulnerability.
Fixed in 2023.01+dfsg-2+deb12u3Fixed in 2025.01-3+deb13u1Fixed in 2025.01-3.2
Upgrade
Upgrade debian/u-boot to a version that resolves this vulnerability.
Fixed in 2022.07+dfsg-1

Event History

Jun 8, 2022

CVE Published

via Ubuntu·12:00 AM

CVE Published

via MITRE·12:32 PM

Data Sourced

via MITRE·12:32 PM

Description

Data Sourced

via NVD·01:15 PM

DescriptionSeverityWeaknessAffected Software

Data Sourced

via OSV·01:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-4150-1

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-30790.

What is the severity of CVE-2022-30790?

The severity of CVE-2022-30790 is high.

What is the affected software?

The affected software is Das U-Boot 2022.01.

What is the CVE ID for the related issue?

The related issue has the CVE ID CVE-2022-30552.

Are there any references for more information?

Yes, you can find more information at the following references: - [GitHub](https://github.com/u-boot/u-boot/tags) - [NCC Group](https://research.nccgroup.com/2022/06/03/technical-advisory-multiple-vulnerabilities-in-u-boot-cve-2022-30790-cve-2022-30552/)

CVE-2022-30790: Buffer Overflow

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the vulnerability ID for this issue?

What is the severity of CVE-2022-30790?

What is the affected software?

What is the CVE ID for the related issue?

Are there any references for more information?

Company

Resources

Contact