CVE-2022-35015

概要

参考情報

• drive.google.com/file/d/1pxNOlyl5mWXdVwkmCD4ZuXEPxI3PZAac/view · Exploit
• Cvjark/Poc · Exploit
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQHLMLFHPV5C7PTBZML6U72QT6VNEOEF
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XP42AC5VPTY45QKMRL3W4G4EXIUMFXRE

advancecomp のその他の脆弱性

• CVE-2023-2961低 3.3A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability.
• CVE-2022-35020中 5.5Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /sanitizer_common/sanitizer_comm…
• CVE-2022-35019中 5.5Advancecomp v2.3 was discovered to contain a segmentation fault.
• CVE-2022-35018中 5.5Advancecomp v2.3 was discovered to contain a segmentation fault.
• CVE-2022-35017中 5.5Advancecomp v2.3 was discovered to contain a heap buffer overflow.