CVE-2022-31291: Double Free
Published Jun 16, 2022
·Updated
An issue in dltconfigfileparser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets.
Affected Software
2 affected components
GENIVI Diagnostic Log and Trace=2.18.8
Debian Debian Linux=10.0
Remediation
Patch Available
Event History
Jun 16, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-31291?
CVE-2022-31291 is classified as a high severity vulnerability due to its potential for remote exploitation.
2
How do I fix CVE-2022-31291?
To fix CVE-2022-31291, upgrade to a patched version of the dlt-daemon software.
3
What impacts does CVE-2022-31291 have on affected systems?
CVE-2022-31291 can lead to a double free vulnerability, which may result in denial of service or arbitrary code execution.
4
Which software versions are vulnerable to CVE-2022-31291?
CVE-2022-31291 affects dlt-daemon version 2.18.8 and Debian Linux version 10.0.
5
How can I determine if my system is affected by CVE-2022-31291?
Check your system for the presence of dlt-daemon version 2.18.8 or Debian Linux version 10.0 to determine if it is affected.