CVE-2022-30767
u-boot: nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a...
CVE-2022-30767 is fixed in 15 products on 1 platform, first by DEBIAN-CVE-2022-30767, released May 16, 2022. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
9.8
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0273
86th percentile
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| u-boot · Debian 12.15 (bookworm) | 2022.07+dfsg-1 | DEBIAN-CVE-2022-30767 | May 16, 2022 |
| u-boot · Debian 13.5 (trixie) | 2022.07+dfsg-1 | DEBIAN-CVE-2022-30767 | May 16, 2022 |
| u-boot · Debian 14 | 2022.07+dfsg-1 | DEBIAN-CVE-2022-30767 | May 16, 2022 |
| u-boot · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-amlogic · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-amlogic 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-amlogic · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-amlogic 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-amlogic · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-amlogic 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-exynos · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-exynos 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-exynos · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-exynos 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-exynos · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-exynos 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-imx · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-imx 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-imx · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-imx 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-imx · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-imx 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-microchip · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-microchip 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-mvebu · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-mvebu 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-mvebu · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-mvebu 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-mvebu · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-mvebu 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-omap · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-omap 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-omap · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-omap 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-omap · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-omap 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-qcom · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-qcom 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-qcom · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-qcom 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-qcom · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-qcom 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-qemu · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-qemu 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-qemu · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-qemu 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-qemu · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-qemu 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-rockchip · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-rockchip 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-rockchip · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-rockchip 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-rockchip · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-rockchip 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-rpi · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-rpi 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-rpi · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-rpi 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-rpi · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-rpi 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-sifive · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-sifive 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-sifive · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-sifive 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-sunxi · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-sunxi 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-sunxi · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-sunxi 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-sunxi · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-sunxi 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-tegra · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-tegra 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-tegra · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-tegra 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-tegra · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-tegra 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
| u-boot-tools · Ubuntu 18.04.6 LTS (bionic) | 2020.10+dfsg-1ubuntu0~18.04.3 | u-boot-tools 2020.10+dfsg-1ubuntu0~18.04.3 | Sep 23, 2022 |
| u-boot-tools · Ubuntu 20.04 LTS (focal) | 2021.01+dfsg-3ubuntu0~20.04.5 | u-boot-tools 2021.01+dfsg-3ubuntu0~20.04.5 | Sep 23, 2022 |
| u-boot-tools · Ubuntu 22.04.1 LTS (jammy) | 2022.01+dfsg-2ubuntu2.3 | u-boot-tools 2022.01+dfsg-2ubuntu2.3 | Sep 23, 2022 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.