PT-2023-15158 · Ostree · Ostree

Shinmaoo · Publicado 2023-07-18 · Atualizado 2024-02-14 · CVE-2022-47085

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ostree versions prior to 2022.7 ostree versions prior to 0.17.1

Description An issue in ostree allows attackers to cause a denial of service or other unspecified impacts via the print panic function in repo checkout filter.rs.

Recommendations For versions prior to 2022.7, update to version 2022.7 or later. For versions prior to 0.17.1, update to version 0.17.1 or later.

Exploit

Correção

Identificadores relacionados

AZL-27654

AZL-35219

CVE-2022-47085

GHSA-X96G-95FQ-4XV4

ROSA-SA-2024-2342

Produtos afetados

Ostree

Referências · 12

• 🔥 https://doc.rust-lang.org/std/macro.eprintln.html · Exploit
• https://github.com/ostreedev/ostree/issues/2775 · Correção
• https://github.com/ostreedev/ostree/commit/d9bb160a7c1e7f0a2308a7282622b91bc27d448c · Nota
• https://github.com/ostreedev/ostree · Nota
• https://osv.dev/vulnerability/AZL-35219 · Aviso do Fabricante
• https://t.me/cvenotify/55313 · Publicação no Telegram
• https://t.me/cibsecurity/66909 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-x96g-95fq-4xv4 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-27654 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-47085 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-47085 · Aviso do Fabricante
• https://t.me/cvenotify/64468 · Publicação no Telegram