CVE-2022-39837

概要

参考情報

• lists.debian.org/debian-lts-announce/2024/06/msg00021.html
• sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon · Exploit
• seclists.org/fulldisclosure/2022/Sep/24 · Exploit

diagnostic log and trace のその他の脆弱性

• CVE-2022-39836中 5.5An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted…
• CVE-2022-31291高 7.5An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted TCP packets.
• CVE-2021-29507中 6.5GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configurati…
• CVE-2020-36244緊急 9.8The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely …
• CVE-2020-29394高 7.8A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows ar…