CVE-2022-33967

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/33xxx/CVE-2022-33967.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "last_affected": "versions from v2020.10-rc2 to v2022.07-rc5"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "jpcert"
}

References

Affected packages

Git / github.com/u-boot/u-boot

Affected ranges

Type

GIT

Repo

https://github.com/u-boot/u-boot

Events

Introduced

Last affected

554e5514ac00f204282c4a2376ae65935d104e60

Last affected

f87c80ade3911f3d518036a28370fe44c85a95c7

Last affected

96d66a9b8ce11aae9f8bef5244b83b4740b37644

Last affected

ba2a0cbb053951ed6d36161989d38da724696b4d

Last affected

c4fddedc48f336eabc4ce3f74940e6aa372de18c

Last affected

81a659e10a10020cfb03abd4794103194add1f3a

Last affected

1ae955e3a58f46918ef99b0b6c562967ba1bf39e

Last affected

0719bf42931033c3109ecc6357e8adb567cb637b

Last affected

c15f44acf9d473f4682bfdc63b8aebd313492b15

Last affected

62b07b5173e3d04fabfac42cf1f4779d021f94ad

Last affected

1aa9c3b9308763f9b1d3e31a02276baf98245945

Last affected

767582cd4c755c52bce3e1813bc462f37047cb5c

Last affected

d637294e264adfeb29f390dfc393106fd4d41b17

Last affected

a79115dde373f7cdb181040dd6489fd0b21bfbd2

Last affected

9272805139a104c83dff8230e03e9626dd9bc195

Last affected

ade37460a944aed36ae6ee634c4d4a9a22690461

Last affected

734ad933766f0dbbeafe1b27211686940a5e6d16

Last affected

e4b6ebd3de982ae7185dbf689a030e73fd06e0d2

Last affected

df887a045a1d726bbd654ef266e5cbe8cc0c2db3

Last affected

8a4ef8786f053cb4e2fb5db7c9ab90c09a6bb37b

Last affected

f9a719e2954473f9be1f8c14a28288f943a00dd2

Last affected

c149bf41404e34014e37de32fac332892b11bd4a

Last affected

e893e8ea6a5d3af312747d00f93587559193a426

Last affected

eb3393310bffab27265cfc82f15470f70f1acd97

Last affected

f08ed34371c54244421eac8ffb4c77559c5ea013

Last affected

b6d46d951f1092f810e5d5971fb9a3dee8e87e86

Last affected

8f527342db4160a1f030de6fe4a1591787cce65a

Last affected

568a226f87655fd5339514f66413c2ad72f65d6f

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2020.10-rc2"
        },
        {
            "last_affected": "2020.10-rc3"
        },
        {
            "last_affected": "2020.10-rc4"
        },
        {
            "last_affected": "2020.10-rc5"
        },
        {
            "last_affected": "2021.01-NA"
        },
        {
            "last_affected": "2021.01-rc1"
        },
        {
            "last_affected": "2021.01-rc2"
        },
        {
            "last_affected": "2021.01-rc3"
        },
        {
            "last_affected": "2021.01-rc4"
        },
        {
            "last_affected": "2021.01-rc5"
        },
        {
            "last_affected": "2021.04-rc1"
        },
        {
            "last_affected": "2021.04-rc2"
        },
        {
            "last_affected": "2022.01-NA"
        },
        {
            "last_affected": "2022.01-rc1"
        },
        {
            "last_affected": "2022.01-rc2"
        },
        {
            "last_affected": "2022.01-rc3"
        },
        {
            "last_affected": "2022.01-rc4"
        },
        {
            "last_affected": "2022.04-NA"
        },
        {
            "last_affected": "2022.04-rc1"
        },
        {
            "last_affected": "2022.04-rc2"
        },
        {
            "last_affected": "2022.04-rc3"
        },
        {
            "last_affected": "2022.04-rc4"
        },
        {
            "last_affected": "2022.04-rc5"
        },
        {
            "last_affected": "2022.07-rc1"
        },
        {
            "last_affected": "2022.07-rc2"
        },
        {
            "last_affected": "2022.07-rc3"
        },
        {
            "last_affected": "2022.07-rc4"
        },
        {
            "last_affected": "2022.07-rc5"
        }
    ],
    "source": "CPE_STRING",
    "cpe": [
        "cpe:2.3:a:denx:u-boot:2020.10:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2020.10:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2020.10:rc4:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2020.10:rc5:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2021.01:-:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2021.01:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2021.01:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2021.01:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2021.01:rc4:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2021.01:rc5:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2021.04:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2021.04:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.01:-:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.01:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.01:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.01:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.01:rc4:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.04:-:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.04:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.04:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.04:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.04:rc4:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.04:rc5:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.07:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.07:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.07:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.07:rc4:*:*:*:*:*:*",
        "cpe:2.3:a:denx:u-boot:2022.07:rc5:*:*:*:*:*:*"
    ]
}

Affected versions

Other

LABEL_2002_11_05_0120

LABEL_2002_11_05_1735

LABEL_2002_11_10_2310

LABEL_2002_11_11_2211

LABEL_2002_11_18_0115

LABEL_2002_11_22_0015

LABEL_2002_12_03_2230

LABEL_2002_12_07_0120

LABEL_2002_12_21_0040

LABEL_2002_12_28_1700

LABEL_2003_01_11_1050

LABEL_2003_01_14_0055

LABEL_2003_02_28_0150

LABEL_2003_03_06_0050

LABEL_2003_03_06_0200

LABEL_2003_03_06_1440

LABEL_2003_03_06_2255

LABEL_2003_03_14_2150

LABEL_2003_03_25_1830

LABEL_2003_03_26_1300

LABEL_2003_03_27_1900

LABEL_2003_04_05_0300

LABEL_2003_04_15_1900

LABEL_2003_05_03_1700

LABEL_2003_05_12_2355

LABEL_2003_05_20_1630

LABEL_2003_05_20_2250

LABEL_2003_05_22_2230

LABEL_2003_05_23_0055

LABEL_2003_05_23_1450

LABEL_2003_05_30_1450

LABEL_2003_05_31_2115

LABEL_2003_06_04_0200

LABEL_2003_06_05_2140

LABEL_2003_06_16_0055

LABEL_2003_06_22_1530

LABEL_2003_06_26_2220

LABEL_2003_06_27_2340

LABEL_2003_06_29_0145

LABEL_2003_09_06_0055

LABEL_2003_09_12_0110

LABEL_2003_09_12_1745

LABEL_2003_09_13_2100

LABEL_2003_09_16_2310

LABEL_2003_09_18_2045

LABEL_2003_10_01_1830

LABEL_2003_10_06_2355

LABEL_2003_10_09_1515

LABEL_2003_10_09_2320

LABEL_2003_10_10_1200

LABEL_2003_10_14_2140

LABEL_2003_10_16_0200

LABEL_2003_10_20_0025

LABEL_2003_11_26_MKR

LABEL_2003_12_06_1550

LABEL_2004_01_21_2110

LABEL_2004_01_29_1030

LABEL_2004_02_11_2240

LABEL_2004_02_20_2310

LABEL_2004_02_24_0305

LABEL_2004_03_12_0130

LABEL_2004_03_14_2340

LABEL_2004_03_16_2330

LABEL_2004_03_25_1630

LABEL_2004_04_18_2135

LABEL_2004_04_23_2240

LABEL_2004_05_19_2335

LABEL_2004_05_29_1850

LABEL_2004_06_24_1800

LABEL_2004_07_01_1200

LABEL_2004_08_28_2355

LABEL_2004_08_29_0045

LABEL_2004_09_09_0000

LABEL_2004_10_12_0110

LABEL_2004_10_20_0020

LABEL_2004_11_17_2222

LABEL_2004_11_25_0035

LABEL_2004_12_18_2335

LABEL_2004_12_19_1100

LABEL_2004_12_19_2240

LABEL_2004_12_20_1220

LABEL_2005_01_31_2245

LABEL_2005_02_07_2045

LABEL_2005_02_08_1615

LABEL_2005_02_28_0050

LABEL_2005_03_06_0225

LABEL_2005_03_15_0125

LABEL_2005_04_05_1830

LABEL_2005_04_05_2345

LABEL_2005_04_14_0115

LABEL_2005_05_05_1920

LABEL_2005_05_09_1245

LABEL_2005_05_13_0050

LABEL_2005_07_04_0202

LABEL_2005_09_15_2320

LABEL_2006_04_18_1106

LABEL_2006_05_10_1800

LABEL_2006_05_19_1133

LABEL_2006_06_30_2020

U-Boot-0_2_0

U-Boot-0_3_0

U-Boot-0_3_1

U-Boot-0_4_0

U-Boot-0_4_1

U-Boot-0_4_2

U-Boot-0_4_3

U-Boot-0_4_4

U-Boot-0_4_5

U-Boot-0_4_6

U-Boot-0_4_7

U-Boot-0_4_8

U-Boot-1_0_0

U-Boot-1_0_1

U-Boot-1_0_2

U-Boot-1_1_0

U-Boot-1_1_1

U-Boot-1_1_2

U-Boot-1_1_3

U-Boot-1_1_4

U-Boot-1_1_6

U-Boot-1_2_0

v1.*

v1.3.1

v1.3.1-rc1

v1.3.2

v1.3.2-rc2

v1.3.2-rc3

v1.3.3

v1.3.3-rc1

v1.3.3-rc2

v1.3.3-rc3

v2008.*

v2008.10-rc2

v2009.*

v2009.01

v2009.01-rc1

v2009.01-rc2

v2009.01-rc3

v2009.03

v2009.03-rc1

v2009.03-rc2

v2009.06

v2009.06-rc1

v2009.06-rc2

v2009.06-rc3

v2009.08

v2009.08-rc1

v2009.08-rc2

v2009.08-rc3

v2009.11

v2009.11-rc1

v2009.11-rc2

v2010.*

v2010.03

v2010.03-rc1

v2010.03-rc2

v2010.03-rc3

v2010.06-rc1

v2010.06-rc2

v2010.09

v2010.09-rc1

v2010.12

v2010.12-rc1

v2010.12-rc2

v2010.12-rc3

v2011.*

v2011.03

v2011.03-rc1

v2011.03-rc2

v2011.06

v2011.06-rc1

v2011.06-rc2

v2011.06-rc3

v2011.09

v2011.09-rc1

v2011.09-rc2

v2011.12

v2011.12-rc1

v2011.12-rc2

v2011.12-rc3

v2012.*

v2012.04

v2012.04-rc1

v2012.04-rc2

v2012.04-rc3

v2012.04.01

v2012.07

v2012.07-rc1

v2012.07-rc2

v2012.07-rc3

v2012.10

v2012.10-rc1

v2012.10-rc2

v2012.10-rc3

v2013.*

v2013.01

v2013.01-rc1

v2013.01-rc2

v2013.01-rc3

v2013.04

v2013.04-rc1

v2013.04-rc2

v2013.04-rc3

v2013.07

v2013.07-rc1

v2013.07-rc2

v2013.07-rc3

v2013.10

v2013.10-rc1

v2013.10-rc2

v2013.10-rc3

v2013.10-rc4

v2014.*

v2014.01-rc1

v2014.04

v2014.07

v2014.07-rc1

v2014.07-rc2

v2014.07-rc3

v2014.07-rc4

v2014.10

v2014.10-rc1

v2014.10-rc2

v2014.10-rc3

v2015.*

v2015.01

v2015.01-rc1

v2015.01-rc2

v2015.01-rc3

v2015.01-rc4

v2015.04

v2015.04-rc1

v2015.04-rc2

v2015.04-rc3

v2015.04-rc4

v2015.04-rc5

v2015.07

v2015.07-rc1

v2015.07-rc2

v2015.07-rc3

v2015.10

v2015.10-rc1

v2015.10-rc2

v2015.10-rc3

v2015.10-rc4

v2015.10-rc5

v2016.*

v2016.01

v2016.01-rc1

v2016.01-rc2

v2016.01-rc3

v2016.01-rc4

v2016.03

v2016.03-rc1

v2016.03-rc2

v2016.03-rc3

v2016.05

v2016.05-rc1

v2016.05-rc2

v2016.05-rc3

v2016.07

v2016.07-rc1

v2016.07-rc2

v2016.07-rc3

v2016.09

v2016.09-rc1

v2016.09-rc2

v2016.11

v2016.11-rc1

v2016.11-rc2

v2016.11-rc3

v2017.*

v2017.01

v2017.01-rc1

v2017.01-rc2

v2017.01-rc3

v2017.03

v2017.03-rc1

v2017.03-rc2

v2017.03-rc3

v2017.05

v2017.05-rc1

v2017.05-rc2

v2017.05-rc3

v2017.07

v2017.07-rc1

v2017.07-rc2

v2017.07-rc3

v2017.09

v2017.09-rc1

v2017.09-rc2

v2017.09-rc3

v2017.09-rc4

v2017.11

v2017.11-rc1

v2017.11-rc2

v2017.11-rc3

v2017.11-rc4

v2018.*

v2018.01

v2018.01-rc1

v2018.01-rc2

v2018.01-rc3

v2018.03

v2018.03-rc1

v2018.03-rc2

v2018.03-rc3

v2018.03-rc4

v2018.05

v2018.05-rc1

v2018.05-rc2

v2018.05-rc3

v2018.07

v2018.07-rc1

v2018.07-rc2

v2018.07-rc3

v2018.09

v2018.09-rc1

v2018.09-rc2

v2018.09-rc3

v2018.11

v2018.11-rc1

v2018.11-rc2

v2018.11-rc3

v2019.*

v2019.01

v2019.01-rc1

v2019.01-rc2

v2019.01-rc3

v2019.04

v2019.04-rc1

v2019.04-rc2

v2019.04-rc3

v2019.04-rc4

v2019.07

v2019.07-rc1

v2019.07-rc2

v2019.07-rc3

v2019.07-rc4

v2019.10

v2019.10-rc1

v2019.10-rc2

v2019.10-rc3

v2019.10-rc4

v2020.*

v2020.01

v2020.01-rc1

v2020.01-rc2

v2020.01-rc3

v2020.01-rc4

v2020.01-rc5

v2020.04

v2020.04-rc1

v2020.04-rc2

v2020.04-rc3

v2020.04-rc4

v2020.04-rc5

v2020.07

v2020.07-rc1

v2020.07-rc2

v2020.07-rc3

v2020.07-rc4

v2020.07-rc5

v2020.10

v2020.10-rc1

v2020.10-rc2

v2020.10-rc3

v2020.10-rc4

v2020.10-rc5

v2021.*

v2021.01

v2021.01-rc1

v2021.01-rc2

v2021.01-rc3

v2021.01-rc4

v2021.01-rc5

v2021.04

v2021.04-rc1

v2021.04-rc2

v2021.04-rc3

v2021.04-rc4

v2021.04-rc5

v2021.07

v2021.07-rc1

v2021.07-rc2

v2021.07-rc3

v2021.07-rc4

v2021.07-rc5

v2021.10

v2021.10-rc1

v2021.10-rc2

v2021.10-rc3

v2021.10-rc4

v2021.10-rc5

v2022.*

v2022.01

v2022.01-rc1

v2022.01-rc2

v2022.01-rc3

v2022.01-rc4

v2022.04

v2022.04-rc1

v2022.04-rc2

v2022.04-rc3

v2022.04-rc4

v2022.04-rc5

v2022.07-rc1

v2022.07-rc2

v2022.07-rc3

v2022.07-rc4

v2022.07-rc5

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-33967.json"