CVE-2022-33967
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains...
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
- Record
CVE-2022-33967- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
- Record
CVE-2022-33967- Updated
- 2026-11-02
EUVDEUVD-2022-37003 No score
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
- Record
EUVD-2022-37003- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-m6jw-rg4f-jw25
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains...
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
- Record
GHSA-m6jw-rg4f-jw25- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
OSVOESA-2022-1800
uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot's environment.
Security Fix(es):
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.(CVE-2022-33967)
- Record
OESA-2022-1800- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-33967
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
- Record
UBUNTU-CVE-2022-33967- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSV No score
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
- Record
CVE-2022-33967- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-33967 No score
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
- Record
DEBIAN-CVE-2022-33967- Updated
- 2026-11-03
OSVSUSE-SU-2022:2653-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation (bsc#1201745).
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
- Record
SUSE-SU-2022:2653-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2661-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation (bsc#1201745).
- CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214).
- Record
SUSE-SU-2022:2661-1- Updated
- 2026-11-02
OSVUSN-5764-1 No score
u-boot vulnerabilities
It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-2347)
Nicolas Bidron and Nicolas Guigo discovered that U-Boot incorrectly handled certain fragmented IP packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-30552, CVE-2022-30790)
It was discovered that U-Boot incorrectly handled certain NFS lookup replies. A remote attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-30767)
Jincheng Wang discovered that U-Boot incorrectly handled certain SquashFS structures. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-33103)
Tatsuhiko Yasumatsu discovered that U-Boot incorrectly handled certain SquashFS structures. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-33967)
It was discovered that U-Boot incorrectly handled the i2c command. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-34835)
- Record
USN-5764-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
u-bootDebian:12 |
before 2022.07+dfsg-1 | 2022.07+dfsg-1 |
u-bootDebian:13 |
before 2022.07+dfsg-1 | 2022.07+dfsg-1 |
u-bootDebian:14 |
before 2022.07+dfsg-1 | 2022.07+dfsg-1 |
u-bootDebian:11 From an advisory covering 14 CVEs |
before 2021.01+dfsg-5+deb11u1, plus listed versions 2021.01+dfsg-5 |
2021.01+dfsg-5+deb11u1 |
uboot-toolsopenEuler:22.03-LTS |
before 2021.10-6.oe2203 | 2021.10-6.oe2203 |
u-bootSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rpiarm64SUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-bootopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-avnetultra96rev1openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-bananapim64openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
Show 89 moreShow less
| Package | Affected | Fixed |
|---|---|---|
u-boot-dragonboard410copenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-dragonboard820copenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-evb-rk3399openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-firefly-rk3399openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-geekboxopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-hikeyopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-khadas-vimopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-khadas-vim2openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-libretech-acopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-libretech-ccopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-ls1012afrdmqspiopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-mvebudb-88f3720openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-mvebudbarmada8kopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-mvebuespressobin-88f3720openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-mvebumcbin-88f8040openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-nanopia64openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-odroid-c2openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-odroid-c4openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-odroid-n2openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-orangepipc2openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-p2371-2180openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-p2771-0000-500openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-p3450-0000openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pine64plusopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pinebookopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pinebook-pro-rk3399openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pineh64openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-pinephoneopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-poplaropenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rock-pi-4-rk3399openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rock64-rk3328openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rock960-rk3399openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rockpro64-rk3399openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rpi3openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rpi4openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-rpiarm64openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-xilinxzynqmpvirtopenSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-boot-xilinxzynqmpzcu102rev10openSUSE:Leap 15.3 From an advisory covering 2 CVEs |
before 2021.01-150300.7.15.1 | 2021.01-150300.7.15.1 |
u-bootSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rpiarm64SUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-bootopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-avnetultra96rev1openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-bananapim64openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-dragonboard410copenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-dragonboard820copenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-evb-rk3399openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-firefly-rk3399openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-geekboxopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-hikeyopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-khadas-vimopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-khadas-vim2openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-libretech-acopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-libretech-ccopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-ls1012afrdmqspiopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-mvebudb-88f3720openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-mvebudbarmada8kopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-mvebuespressobin-88f3720openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-mvebumcbin-88f8040openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-nanopia64openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-odroid-c2openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-odroid-c4openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-odroid-n2openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-orangepipc2openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-p2371-2180openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-p2771-0000-500openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-p3450-0000openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pine64plusopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pinebookopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pinebook-pro-rk3399openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pineh64openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-pinephoneopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-poplaropenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rock-pi-4-rk3399openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rock-pi-n10-rk3399proopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rock64-rk3328openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rock960-rk3399openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rockpro64-rk3399openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rpi3openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rpi4openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-rpiarm64openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-xilinxzynqmpvirtopenSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-boot-xilinxzynqmpzcu102rev10openSUSE:Leap 15.4 From an advisory covering 2 CVEs |
before 2021.10-150400.4.8.1 | 2021.10-150400.4.8.1 |
u-bootUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2015.04+dfsg1-2ubuntu12015.10+dfsg1-22015.10+dfsg1-32015.10+dfsg1-42016.01+dfsg1-1 Show 7 moreShow less2016.01+dfsg1-1ubuntu12016.01+dfsg1-2ubuntu12016.01+dfsg1-2ubuntu22016.01+dfsg1-2ubuntu32016.01+dfsg1-2ubuntu52016.01+dfsg1-2ubuntu5+esm12016.01+dfsg1-2ubuntu5+esm2 |
None known |
u-bootUbuntu:18.04:LTS |
before 2020.10+dfsg-1ubuntu0~18.04.3, plus listed versions 2016.03+dfsg1-6ubuntu22018.07~rc3+dfsg1-0ubuntu1~18.04.12018.07~rc3+dfsg1-0ubuntu2~18.04.12018.07~rc3+dfsg1-0ubuntu3~18.04.12019.07+dfsg-1ubuntu4~18.04.12020.10+dfsg-1ubuntu0~18.04.2 |
2020.10+dfsg-1ubuntu0~18.04.3 |
u-bootUbuntu:20.04:LTS |
before 2021.01+dfsg-3ubuntu0~20.04.5, plus listed versions 2019.07+dfsg-1ubuntu32019.07+dfsg-1ubuntu52019.07+dfsg-1ubuntu62020.10+dfsg-1ubuntu0~20.04.22021.01+dfsg-3ubuntu0~20.04.12021.01+dfsg-3ubuntu0~20.04.32021.01+dfsg-3ubuntu0~20.04.4 |
2021.01+dfsg-3ubuntu0~20.04.5 |
u-bootUbuntu:22.04:LTS |
before 2022.01+dfsg-2ubuntu2.3, plus listed versions 2021.07+dfsg-0ubuntu82021.07+dfsg-0ubuntu92021.07+dfsg-0ubuntu102022.01+dfsg-2ubuntu12022.01+dfsg-2ubuntu22022.01+dfsg-2ubuntu2.1 |
2022.01+dfsg-2ubuntu2.3 |
u-bootUbuntu:18.04:LTS From an advisory covering 7 CVEs |
before 2020.10+dfsg-1ubuntu0~18.04.3, plus listed versions 2016.03+dfsg1-6ubuntu22018.07~rc3+dfsg1-0ubuntu1~18.04.12018.07~rc3+dfsg1-0ubuntu2~18.04.12018.07~rc3+dfsg1-0ubuntu3~18.04.12019.07+dfsg-1ubuntu4~18.04.12020.10+dfsg-1ubuntu0~18.04.2 |
2020.10+dfsg-1ubuntu0~18.04.3 |
u-bootUbuntu:20.04:LTS From an advisory covering 7 CVEs |
before 2021.01+dfsg-3ubuntu0~20.04.5, plus listed versions 2019.07+dfsg-1ubuntu32019.07+dfsg-1ubuntu52019.07+dfsg-1ubuntu62020.10+dfsg-1ubuntu0~20.04.22021.01+dfsg-3ubuntu0~20.04.12021.01+dfsg-3ubuntu0~20.04.32021.01+dfsg-3ubuntu0~20.04.4 |
2021.01+dfsg-3ubuntu0~20.04.5 |
u-bootUbuntu:22.04:LTS From an advisory covering 7 CVEs |
before 2022.01+dfsg-2ubuntu2.3, plus listed versions 2021.07+dfsg-0ubuntu82021.07+dfsg-0ubuntu92021.07+dfsg-0ubuntu102022.01+dfsg-2ubuntu12022.01+dfsg-2ubuntu22022.01+dfsg-2ubuntu2.1 |
2022.01+dfsg-2ubuntu2.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-33967 is a high vulnerability (CVSS 7.8) in Denx U-boot, published July 20, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in u-boot 2022.07+dfsg-1.
References
denx.de/project/u-boot
lists.denx.de/pipermail/u-boot/2022-June/487467.html
source.denx.de/u-boot/u-boot/-/commit/7f7fb9937c6cb49dd35153bd6708872b390b0a44
jvn.jp/en/vu/JVNVU97846460/index.html
lists.debian.org/debian-lts-announce/2025/05/msg00001.html
nvd.nist.gov/vuln/detail/CVE-2022-33967
Show 19 moreShow less
github.com/advisories/GHSA-m6jw-rg4f-jw25
security-tracker.debian.org/tracker/CVE-2022-33967
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1800
suse.com/support/update/announcement/2022/suse-su-20222653-1
bugzilla.suse.com/1201214
ubuntu.com/security/CVE-2022-33967
cve.org/CVERecord?id=CVE-2022-33967