CVE-2022-30767
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an...
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
9.8
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
- Record
CVE-2022-30767- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
- Record
CVE-2022-30767- Updated
- 2026-11-02
EUVDEUVD-2022-52591 No score
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
- Record
EUVD-2022-52591- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-27g3-5ffj-8mw8
9.8
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an...
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
- Record
GHSA-27g3-5ffj-8mw8- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-120
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-30767
9.8
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
- Record
DEBIAN-CVE-2022-30767- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVOESA-2022-1978
9.8
uboot-tools security update
This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot's environment.
Security Fix(es):
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.(CVE-2022-30767)
- Record
OESA-2022-1978- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVUBUNTU-CVE-2022-30767
9.8
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
- Record
UBUNTU-CVE-2022-30767- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV No score
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
- Record
CVE-2022-30767- Updated
- 2026-11-02
OSVROOT-OS-ALPINE-316-CVE-2022-30767 No score
CVE-2022-30767 in rootio-u-boot - Patched by Root
Root has patched CVE-2022-30767 in the rootio-u-boot package for Root:Alpine:3.16. Multiple fixed versions available.
- Record
ROOT-OS-ALPINE-316-CVE-2022-30767- Updated
- 2026-11-02
OSVSUSE-SU-2022:2052-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-30552: A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code. (bsc#1200363)
- CVE-2022-30790: A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive. (bsc#1200364)
- CVE-2022-30767: Fixed an unbounded memcpy with a failed length check leading to a buffer overflow (bsc#1199623).
- Record
SUSE-SU-2022:2052-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2053-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-30552: A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code. (bsc#1200363)
- CVE-2022-30790: A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive. (bsc#1200364)
- CVE-2022-30767: Fixed an unbounded memcpy with a failed length check leading to a buffer overflow (bsc#1199623).
- Record
SUSE-SU-2022:2053-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2054-1 No score
Security update for u-boot
This update for u-boot fixes the following issues:
- CVE-2022-30552: A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code. (bsc#1200363)
- CVE-2022-30790: A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive. (bsc#1200364)
- CVE-2022-30767: Fixed an unbounded memcpy with a failed length check leading to a buffer overflow (bsc#1199623).
- Record
SUSE-SU-2022:2054-1- Updated
- 2026-11-02
OSVUSN-5764-1 No score
u-boot vulnerabilities
It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-2347)
Nicolas Bidron and Nicolas Guigo discovered that U-Boot incorrectly handled certain fragmented IP packets. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-30552, CVE-2022-30790)
It was discovered that U-Boot incorrectly handled certain NFS lookup replies. A remote attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-30767)
Jincheng Wang discovered that U-Boot incorrectly handled certain SquashFS structures. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-33103)
Tatsuhiko Yasumatsu discovered that U-Boot incorrectly handled certain SquashFS structures. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-33967)
It was discovered that U-Boot incorrectly handled the i2c command. A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-34835)
- Record
USN-5764-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
u-bootDebian:12 |
before 2022.07+dfsg-1 | 2022.07+dfsg-1 |
u-bootDebian:13 |
before 2022.07+dfsg-1 | 2022.07+dfsg-1 |
u-bootDebian:14 |
before 2022.07+dfsg-1 | 2022.07+dfsg-1 |
u-bootDebian:11 |
before 2021.01+dfsg-5+deb11u1, plus listed versions 2021.01+dfsg-5 |
2021.01+dfsg-5+deb11u1 |
uboot-toolsopenEuler:20.03-LTS-SP1 |
before 2020.07-7.oe1 | 2020.07-7.oe1 |
uboot-toolsopenEuler:20.03-LTS-SP3 |
before 2020.07-7.oe1 | 2020.07-7.oe1 |
uboot-toolsopenEuler:22.03-LTS |
before 2021.10-7.oe2203 | 2021.10-7.oe2203 |
rootio-u-bootRoot:Alpine:3.16 |
before 2022.04-r10071 | 2022.04-r10071 |
u-bootSUSE:Linux Enterprise Server 12 SP5 |
before 2019.01-5.8.1 | 2019.01-5.8.1 |
u-boot-rpi3SUSE:Linux Enterprise Server 12 SP5 |
before 2019.01-5.8.1 | 2019.01-5.8.1 |
Show 93 moreShow less
| Package | Affected | Fixed |
|---|---|---|
u-bootSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2019.01-5.8.1 | 2019.01-5.8.1 |
u-boot-rpi3SUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2019.01-5.8.1 | 2019.01-5.8.1 |
u-bootSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-rpiarm64SUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-bootopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-avnetultra96rev1openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-bananapim64openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-dragonboard410copenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-dragonboard820copenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-evb-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-firefly-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-geekboxopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-hikeyopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-khadas-vimopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-khadas-vim2openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-libretech-acopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-libretech-ccopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-ls1012afrdmqspiopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-mvebudb-88f3720openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-mvebudbarmada8kopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-mvebuespressobin-88f3720openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-mvebumcbin-88f8040openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-nanopia64openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-odroid-c2openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-odroid-c4openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-odroid-n2openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-orangepipc2openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-p2371-2180openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-p2771-0000-500openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-p3450-0000openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-pine64plusopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-pinebookopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-pinebook-pro-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-pineh64openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-pinephoneopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-poplaropenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-rock-pi-4-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-rock64-rk3328openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-rock960-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-rockpro64-rk3399openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-rpi3openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-rpi4openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-rpiarm64openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-xilinxzynqmpvirtopenSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-boot-xilinxzynqmpzcu102rev10openSUSE:Leap 15.3 |
before 2021.01-150300.7.12.1 | 2021.01-150300.7.12.1 |
u-bootSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-rpiarm64SUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-bootopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-avnetultra96rev1openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-bananapim64openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-dragonboard410copenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-dragonboard820copenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-evb-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-firefly-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-geekboxopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-hikeyopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-khadas-vimopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-khadas-vim2openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-libretech-acopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-libretech-ccopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-ls1012afrdmqspiopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-mvebudb-88f3720openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-mvebudbarmada8kopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-mvebuespressobin-88f3720openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-mvebumcbin-88f8040openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-nanopia64openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-odroid-c2openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-odroid-c4openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-odroid-n2openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-orangepipc2openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-p2371-2180openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-p2771-0000-500openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-p3450-0000openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-pine64plusopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-pinebookopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-pinebook-pro-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-pineh64openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-pinephoneopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-poplaropenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-rock-pi-4-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-rock-pi-n10-rk3399proopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-rock64-rk3328openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-rock960-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-rockpro64-rk3399openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-rpi3openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-rpi4openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-rpiarm64openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-xilinxzynqmpvirtopenSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-boot-xilinxzynqmpzcu102rev10openSUSE:Leap 15.4 |
before 2021.10-150400.4.5.1 | 2021.10-150400.4.5.1 |
u-bootUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2015.04+dfsg1-2ubuntu12015.10+dfsg1-22015.10+dfsg1-32015.10+dfsg1-42016.01+dfsg1-1 Show 7 moreShow less2016.01+dfsg1-1ubuntu12016.01+dfsg1-2ubuntu12016.01+dfsg1-2ubuntu22016.01+dfsg1-2ubuntu32016.01+dfsg1-2ubuntu52016.01+dfsg1-2ubuntu5+esm12016.01+dfsg1-2ubuntu5+esm2 |
None known |
u-bootUbuntu:18.04:LTS |
before 2020.10+dfsg-1ubuntu0~18.04.3, plus listed versions 2016.03+dfsg1-6ubuntu22018.07~rc3+dfsg1-0ubuntu1~18.04.12018.07~rc3+dfsg1-0ubuntu2~18.04.12018.07~rc3+dfsg1-0ubuntu3~18.04.12019.07+dfsg-1ubuntu4~18.04.12020.10+dfsg-1ubuntu0~18.04.2 |
2020.10+dfsg-1ubuntu0~18.04.3 |
u-bootUbuntu:20.04:LTS |
before 2021.01+dfsg-3ubuntu0~20.04.5, plus listed versions 2019.07+dfsg-1ubuntu32019.07+dfsg-1ubuntu52019.07+dfsg-1ubuntu62020.10+dfsg-1ubuntu0~20.04.22021.01+dfsg-3ubuntu0~20.04.12021.01+dfsg-3ubuntu0~20.04.32021.01+dfsg-3ubuntu0~20.04.4 |
2021.01+dfsg-3ubuntu0~20.04.5 |
u-bootUbuntu:22.04:LTS |
before 2022.01+dfsg-2ubuntu2.3, plus listed versions 2021.07+dfsg-0ubuntu82021.07+dfsg-0ubuntu92021.07+dfsg-0ubuntu102022.01+dfsg-2ubuntu12022.01+dfsg-2ubuntu22022.01+dfsg-2ubuntu2.1 |
2022.01+dfsg-2ubuntu2.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-30767 is a critical vulnerability (CVSS 9.8) in Denx U-boot, published May 16, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in u-boot 2022.07+dfsg-1.
References
github.com/u-boot/u-boot/commit/5d14ee4e53a81055d34ba280cb8fd90330f22a96
lists.denx.de/pipermail/u-boot/2022-May/483952.html
securitylab.github.com/research/uboot-rce-nfs-vulnerability
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB
source.denx.de/u-boot/u-boot/-/commit/bdbf7a05e26f3c5fd437c99e2755ffde186ddc80
lists.debian.org/debian-lts-announce/2025/05/msg00001.html
Show 24 moreShow less
nvd.nist.gov/vuln/detail/CVE-2022-30767
lists.fedoraproject.org/archives/list/[email protected]/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB
github.com/advisories/GHSA-27g3-5ffj-8mw8
github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30767.json
security-tracker.debian.org/tracker/CVE-2022-30767
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1978
suse.com/support/update/announcement/2022/suse-su-20222052-1
bugzilla.suse.com/1199623
bugzilla.suse.com/1200363
bugzilla.suse.com/1200364
suse.com/security/cve/CVE-2022-30552
suse.com/security/cve/CVE-2022-30767
suse.com/security/cve/CVE-2022-30790
suse.com/support/update/announcement/2022/suse-su-20222053-1
suse.com/support/update/announcement/2022/suse-su-20222054-1
ubuntu.com/security/CVE-2022-30767
ubuntu.com/security/notices/USN-5764-1
cve.org/CVERecord?id=CVE-2022-30767
ubuntu.com/security/CVE-2022-2347
ubuntu.com/security/CVE-2022-30552
ubuntu.com/security/CVE-2022-30790
ubuntu.com/security/CVE-2022-33103
ubuntu.com/security/CVE-2022-33967
ubuntu.com/security/CVE-2022-34835