CVE-2022-33103

u-boot-mvebu: Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readd...

CVE-2022-33103 is fixed in 15 products on 1 platform, first by DEBIAN-CVE-2022-33103, released July 1, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.8
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0046
39th percentile

Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().

Where it's fixed

ProductFixed inFixReleased
Linux
u-boot · Debian 12.15 (bookworm) 2022.07+dfsg-1 DEBIAN-CVE-2022-33103 Jul 1, 2022
u-boot · Debian 13.5 (trixie) 2022.07+dfsg-1 DEBIAN-CVE-2022-33103 Jul 1, 2022
u-boot · Debian 14 2022.07+dfsg-1 DEBIAN-CVE-2022-33103 Jul 1, 2022
u-boot · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-amlogic · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-amlogic 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-amlogic · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-amlogic 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-amlogic · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-amlogic 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-exynos · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-exynos 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-exynos · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-exynos 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-exynos · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-exynos 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-imx · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-imx 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-imx · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-imx 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-imx · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-imx 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-microchip · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-microchip 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-mvebu · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-mvebu 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-mvebu · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-mvebu 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-mvebu · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-mvebu 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-omap · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-omap 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-omap · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-omap 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-omap · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-omap 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-qcom · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-qcom 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-qcom · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-qcom 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-qcom · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-qcom 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-qemu · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-qemu 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-qemu · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-qemu 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-qemu · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-qemu 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-rockchip · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-rockchip 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-rockchip · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-rockchip 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-rockchip · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-rockchip 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-rpi · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-rpi 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-rpi · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-rpi 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-rpi · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-rpi 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-sifive · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-sifive 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-sifive · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-sifive 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-sunxi · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-sunxi 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-sunxi · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-sunxi 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-sunxi · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-sunxi 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-tegra · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-tegra 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-tegra · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-tegra 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-tegra · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-tegra 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022
u-boot-tools · Ubuntu 18.04.6 LTS (bionic) 2020.10+dfsg-1ubuntu0~18.04.3 u-boot-tools 2020.10+dfsg-1ubuntu0~18.04.3 Sep 23, 2022
u-boot-tools · Ubuntu 20.04 LTS (focal) 2021.01+dfsg-3ubuntu0~20.04.5 u-boot-tools 2021.01+dfsg-3ubuntu0~20.04.5 Sep 23, 2022
u-boot-tools · Ubuntu 22.04.1 LTS (jammy) 2022.01+dfsg-2ubuntu2.3 u-boot-tools 2022.01+dfsg-2ubuntu2.3 Sep 23, 2022

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.