{"id":"CVE-2022-30767","aliases":["DEBIAN-CVE-2022-30767","DLA-4150-1","EUVD-2022-52591","GHSA-27g3-5ffj-8mw8","OESA-2022-1978","ROOT-OS-ALPINE-316-CVE-2022-30767","SUSE-SU-2022:2052-1","SUSE-SU-2022:2053-1","SUSE-SU-2022:2054-1","UBUNTU-CVE-2022-30767","USN-5764-1"],"status":"published","title":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an...","description":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02731,"percentile":0.8621,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2022-05-16T02:13:47Z","modified":"2026-11-03T08:01:16Z","fixes":[{"ecosystem":"Debian:12","package":"u-boot","fixed_in":["2022.07+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"u-boot","fixed_in":["2022.07+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"u-boot","fixed_in":["2022.07+dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"uboot-tools","fixed_in":["2020.07-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"uboot-tools","fixed_in":["2020.07-7.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"uboot-tools","fixed_in":["2021.10-7.oe2203"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.16","package":"rootio-u-boot","fixed_in":["2022.04-r10071"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"u-boot","fixed_in":["2020.10+dfsg-1ubuntu0~18.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"u-boot","fixed_in":["2021.01+dfsg-3ubuntu0~20.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"u-boot","fixed_in":["2022.01+dfsg-2ubuntu2.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.07+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.07+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.07+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01+dfsg-5+deb11u1"}]}],"versions":["2021.01+dfsg-5"],"bundled":14},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"uboot-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.07-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"uboot-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.07-7.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"uboot-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-7.oe2203"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.16","package":"rootio-u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.04-r10071"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.01-5.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"u-boot-rpi3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.01-5.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.01-5.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"u-boot-rpi3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.01-5.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"u-boot-rpiarm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-avnetultra96rev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-bananapim64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-dragonboard410c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-dragonboard820c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-evb-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-firefly-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-geekbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-hikey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-khadas-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-khadas-vim2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-libretech-ac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-libretech-cc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-ls1012afrdmqspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-mvebudb-88f3720","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-mvebudbarmada8k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-mvebuespressobin-88f3720","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-mvebumcbin-88f8040","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-nanopia64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-odroid-c2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-odroid-c4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-odroid-n2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-orangepipc2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-p2371-2180","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-p2771-0000-500","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-p3450-0000","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-pine64plus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-pinebook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-pinebook-pro-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-pineh64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-pinephone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-poplar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-rock-pi-4-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-rock64-rk3328","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-rock960-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-rockpro64-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-rpi3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-rpi4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-rpiarm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-xilinxzynqmpvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"u-boot-xilinxzynqmpzcu102rev10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-150300.7.12.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"u-boot-rpiarm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-avnetultra96rev1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-bananapim64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-dragonboard410c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-dragonboard820c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-evb-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-firefly-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-geekbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-hikey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-khadas-vim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-khadas-vim2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-libretech-ac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-libretech-cc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-ls1012afrdmqspi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-mvebudb-88f3720","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-mvebudbarmada8k","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-mvebuespressobin-88f3720","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-mvebumcbin-88f8040","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-nanopia64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-odroid-c2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-odroid-c4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-odroid-n2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-orangepipc2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-p2371-2180","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-p2771-0000-500","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-p3450-0000","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-pine64plus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-pinebook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-pinebook-pro-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-pineh64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-pinephone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-poplar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-rock-pi-4-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-rock-pi-n10-rk3399pro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-rock64-rk3328","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-rock960-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-rockpro64-rk3399","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-rpi3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-rpi4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-rpiarm64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-xilinxzynqmpvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"u-boot-xilinxzynqmpzcu102rev10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.10-150400.4.5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2015.04+dfsg1-2ubuntu1","2015.10+dfsg1-2","2015.10+dfsg1-3","2015.10+dfsg1-4","2016.01+dfsg1-1","2016.01+dfsg1-1ubuntu1","2016.01+dfsg1-2ubuntu1","2016.01+dfsg1-2ubuntu2","2016.01+dfsg1-2ubuntu3","2016.01+dfsg1-2ubuntu5","2016.01+dfsg1-2ubuntu5+esm1","2016.01+dfsg1-2ubuntu5+esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.10+dfsg-1ubuntu0~18.04.3"}]}],"versions":["2016.03+dfsg1-6ubuntu2","2018.07~rc3+dfsg1-0ubuntu1~18.04.1","2018.07~rc3+dfsg1-0ubuntu2~18.04.1","2018.07~rc3+dfsg1-0ubuntu3~18.04.1","2019.07+dfsg-1ubuntu4~18.04.1","2020.10+dfsg-1ubuntu0~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01+dfsg-3ubuntu0~20.04.5"}]}],"versions":["2019.07+dfsg-1ubuntu3","2019.07+dfsg-1ubuntu5","2019.07+dfsg-1ubuntu6","2020.10+dfsg-1ubuntu0~20.04.2","2021.01+dfsg-3ubuntu0~20.04.1","2021.01+dfsg-3ubuntu0~20.04.3","2021.01+dfsg-3ubuntu0~20.04.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.01+dfsg-2ubuntu2.3"}]}],"versions":["2021.07+dfsg-0ubuntu8","2021.07+dfsg-0ubuntu9","2021.07+dfsg-0ubuntu10","2022.01+dfsg-2ubuntu1","2022.01+dfsg-2ubuntu2","2022.01+dfsg-2ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.10+dfsg-1ubuntu0~18.04.3"}]}],"versions":["2016.03+dfsg1-6ubuntu2","2018.07~rc3+dfsg1-0ubuntu1~18.04.1","2018.07~rc3+dfsg1-0ubuntu2~18.04.1","2018.07~rc3+dfsg1-0ubuntu3~18.04.1","2019.07+dfsg-1ubuntu4~18.04.1","2020.10+dfsg-1ubuntu0~18.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01+dfsg-3ubuntu0~20.04.5"}]}],"versions":["2019.07+dfsg-1ubuntu3","2019.07+dfsg-1ubuntu5","2019.07+dfsg-1ubuntu6","2020.10+dfsg-1ubuntu0~20.04.2","2021.01+dfsg-3ubuntu0~20.04.1","2021.01+dfsg-3ubuntu0~20.04.3","2021.01+dfsg-3ubuntu0~20.04.4"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"u-boot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2022.01+dfsg-2ubuntu2.3"}]}],"versions":["2021.07+dfsg-0ubuntu8","2021.07+dfsg-0ubuntu9","2021.07+dfsg-0ubuntu10","2022.01+dfsg-2ubuntu1","2022.01+dfsg-2ubuntu2","2022.01+dfsg-2ubuntu2.1"],"bundled":7}],"products":[{"vendor":"denx","product":"u-boot"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://github.com/u-boot/u-boot/commit/5d14ee4e53a81055d34ba280cb8fd90330f22a96","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.denx.de/pipermail/u-boot/2022-May/483952.html","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","web","report"]},{"url":"https://securitylab.github.com/research/uboot-rce-nfs-vulnerability/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://source.denx.de/u-boot/u-boot/-/commit/bdbf7a05e26f3c5fd437c99e2755ffde186ddc80","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30767","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB"},{"url":"https://securitylab.github.com/research/uboot-rce-nfs-vulnerability"},{"url":"https://github.com/advisories/GHSA-27g3-5ffj-8mw8"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30767.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-30767","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1978","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222052-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199623","tags":["report"]},{"url":"https://bugzilla.suse.com/1200363","tags":["report"]},{"url":"https://bugzilla.suse.com/1200364","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30552","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30790","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222053-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222054-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-30767","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5764-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30767","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2347","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30552","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-30790","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-33103","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-33967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-34835","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-30767","description":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.","status":"published","published":"2022-05-16T02:13:47Z","modified":"2025-11-03T19:27:03.693Z","updated_at":"2026-11-02T14:34:31.184134Z"}],"euvd":[{"id":"EUVD-2022-52591","description":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.","status":"published","published":"2022-05-16T02:13:47Z","modified":"2025-11-03T19:27:03Z","updated_at":"2026-11-02T19:49:34.152725Z"}],"ghsa":[{"id":"GHSA-27g3-5ffj-8mw8","title":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an...","description":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.","status":"published","published":"2022-05-17T00:01:46Z","modified":"2025-11-03T21:31:41Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:04:19.274788Z"}],"nvd":[{"id":"CVE-2022-30767","description":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.","status":"published","published":"2022-05-16T03:15:07.563Z","modified":"2026-06-17T04:44:15.19Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:20.264424Z"}],"osv":[{"id":"DEBIAN-CVE-2022-30767","description":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.","status":"published","published":"2022-05-16T03:15:07.563Z","modified":"2026-11-03T08:01:16.858574096Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2022-1978","title":"uboot-tools security update","description":"This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot's environment.\r\n\r\nSecurity Fix(es):\r\n\r\nnfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.(CVE-2022-30767)","status":"published","published":"2022-10-14T11:05:17Z","modified":"2026-08-18T01:17:19.173857525Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-30767","description":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.","status":"published","published":"2022-05-16T03:15:00Z","modified":"2026-10-17T12:55:58.265052219Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"CVE-2022-30767","description":"nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.","status":"published","published":"2022-05-16T02:13:47Z","modified":"2026-10-28T10:28:05.182325777Z","updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"DLA-4150-1","title":"u-boot - security update","status":"published","published":"2025-05-01T00:00:00Z","modified":"2026-03-09T02:09:33.100542Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"ROOT-OS-ALPINE-316-CVE-2022-30767","title":"CVE-2022-30767 in rootio-u-boot - Patched by Root","description":"Root has patched CVE-2022-30767 in the rootio-u-boot package for Root:Alpine:3.16. Multiple fixed versions available.","status":"published","published":"2025-08-12T08:23:12Z","modified":"2026-02-13T03:18:20.621805Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"SUSE-SU-2022:2052-1","title":"Security update for u-boot","description":"This update for u-boot fixes the following issues:\n\n- CVE-2022-30552: A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code.\n(bsc#1200363)\n- CVE-2022-30790: A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive.\n(bsc#1200364)\n- CVE-2022-30767: Fixed an unbounded memcpy with a failed length check leading to a buffer overflow (bsc#1199623).\n","status":"published","published":"2022-06-13T08:36:15Z","modified":"2026-02-04T03:04:57.976801Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2053-1","title":"Security update for u-boot","description":"This update for u-boot fixes the following issues:\n\n- CVE-2022-30552: A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code.\n(bsc#1200363)\n- CVE-2022-30790: A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive.\n(bsc#1200364)\n- CVE-2022-30767: Fixed an unbounded memcpy with a failed length check leading to a buffer overflow (bsc#1199623).\n","status":"published","published":"2022-06-13T08:37:51Z","modified":"2026-02-04T03:42:00.502909Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2054-1","title":"Security update for u-boot","description":"This update for u-boot fixes the following issues:\n\n- CVE-2022-30552: A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code.\n(bsc#1200363)\n- CVE-2022-30790: A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive.\n(bsc#1200364)\n- CVE-2022-30767: Fixed an unbounded memcpy with a failed length check leading to a buffer overflow (bsc#1199623).\n","status":"published","published":"2022-06-13T08:39:49Z","modified":"2026-02-04T02:17:44.449254Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5764-1","title":"u-boot vulnerabilities","description":"It was discovered that U-Boot incorrectly handled certain USB DFU download\nsetup packets. A local attacker could use this issue to cause U-Boot to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2022-2347)\n\nNicolas Bidron and Nicolas Guigo discovered that U-Boot incorrectly handled\ncertain fragmented IP packets. A local attacker could use this issue to\ncause U-Boot to crash, resulting in a denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu\n20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-30552, CVE-2022-30790)\n\nIt was discovered that U-Boot incorrectly handled certain NFS lookup\nreplies. A remote attacker could use this issue to cause U-Boot to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04\nLTS. (CVE-2022-30767)\n\nJincheng Wang discovered that U-Boot incorrectly handled certain SquashFS\nstructures. A local attacker could use this issue to cause U-Boot to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and\nUbuntu 22.04 LTS. (CVE-2022-33103)\n\nTatsuhiko Yasumatsu discovered that U-Boot incorrectly handled certain\nSquashFS structures. A local attacker could use this issue to cause U-Boot\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and\nUbuntu 22.04 LTS. (CVE-2022-33967)\n\nIt was discovered that U-Boot incorrectly handled the i2c command. A local\nattacker could use this issue to cause U-Boot to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2022-34835)\n","status":"published","published":"2022-12-06T12:54:01Z","modified":"2026-04-27T16:22:20.178238Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}