CVE-2022-35017: Buffer Overflow
Advancecomp v2.3 was discovered to contain a heap buffer overflow.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/advancecompto a version that resolves this vulnerability.Fixed in 2.5-1 - Upgrade
Upgrade
alpine/advancecompto a version that resolves this vulnerability.Fixed in 2.4-r0 - Upgrade
Upgrade
debian/advancecompto a version that resolves this vulnerability.Fixed in 2.4-1
Event History
Frequently Asked Questions
What is CVE-2022-35017?
CVE-2022-35017 is a vulnerability found in Advancecomp v2.3 that allows a heap buffer overflow.
What is the severity of CVE-2022-35017?
The severity of CVE-2022-35017 is medium with a CVSS score of 5.5.
What software versions are affected by CVE-2022-35017?
Advancecomp v2.3 and Fedora 35, 36, and 37 are affected by CVE-2022-35017.
How can I fix CVE-2022-35017?
Update Advancecomp to a version that has patched the vulnerability, and update Fedora to a version that includes the fix.
Where can I find more information about CVE-2022-35017?
You can find more information about CVE-2022-35017 in the provided references: [link1], [link2], [link3].