summaryrefslogtreecommitdiffstats
path: root/retired/CVE-2022-26490
blob: f75cc711103b33cab4955b9c2b6a060baf47efb0 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
Description: nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
References:
Notes:
 bwh> Driver is not enabled in Debian configurations. I think that
 bwh> the messages being parsed are generated by device firmware,
 bwh> which would make this hard to exploit.
 bwh> The same bug exists in the similar st-nci driver.
 carnil> Fixed as well in 5.16.18 for 5.16.y.
Bugs:
upstream: released (5.17-rc1) [4fbcc1a4cb20fe26ad0225679c536c80f1648221]
5.10-upstream-stable: released (5.10.109) [25c23fe40e6e1ef8e6d503c52b4f518b2e520ab7]
4.19-upstream-stable: released (4.19.237) [0043b74987acb44f1ade537aad901695511cfebe]
4.9-upstream-stable: released (4.9.309) [c1184fa07428fb81371d5863e09795f0d06d35cf]
sid: released (5.16.18-1)
5.10-bullseye-security: released (5.10.113-1)
4.19-buster-security: released (4.19.249-1)
4.9-stretch-security: released (4.9.320-2)

© 2014-2024 Faster IT GmbH | imprint | privacy policy