CVE-2020-36244

概要

参考情報

• GENIVI/dlt-daemon · Patch
• GENIVI/dlt-daemon · Third Party Advisory
• lists.debian.org/debian-lts-announce/2022/12/msg00016.html · Patch
• us-cert.cisa.gov/ics/advisories/icsa-21-147-01 · Third Party Advisory

diagnostic log and trace のその他の脆弱性

• CVE-2022-39837中 5.5An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted…
• CVE-2022-39836中 5.5An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted…
• CVE-2022-31291高 7.5An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets.
• CVE-2021-29507中 6.5GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configurati…
• CVE-2020-29394高 7.8A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows ar…