PT-2022-22496 · Unknown+4 · Advancecomp+4

Published 2022-08-29 · Updated 2023-02-01 · CVE-2022-35018

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Advancecomp version 2.3

Description A segmentation fault was discovered in Advancecomp. The issue is related to bugs and security issues that have been fixed in an update.

Recommendations For Advancecomp version 2.3, update to a newer version to fix the segmentation fault and other bugs and security issues. At the moment, there is no information about specific steps to mitigate the issue without updating.

Exploit

Fix

Related Identifiers

AZL-43558

AZL-44715

CVE-2022-35018

MGASA-2022-0479

USN-5838-1

Affected Products

Advancecomp

Astra Linux

Debian

Linuxmint

Ubuntu

References · 33

• 🔥❌ https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35015.md · Exploit, Deleted
• 🔥❌ https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35018.md · Exploit, Deleted
• 🔥❌ https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35019.md · Exploit, Deleted
• 🔥❌ https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35017.md · Exploit, Deleted
• 🔥❌ https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35014.md · Exploit, Deleted
• 🔥 https://drive.google.com/file/d/1ChqmPdrjId87582a-o5ogWyEI8goRVWJ/view?usp=sharing · Exploit
• 🔥❌ https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35016.md · Exploit, Deleted
• 🔥❌ https://github.com/Cvjark/Poc/blob/main/advancecomp/CVE-2022-35020.md · Exploit, Deleted
• https://ubuntu.com/security/CVE-2022-35017 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5838-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYG2XAL4MBS7ADGJWYRUKBLDTBJFPJER · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/KQHLMLFHPV5C7PTBZML6U72QT6VNEOEF · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35018 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQHLMLFHPV5C7PTBZML6U72QT6VNEOEF · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35018 · Vendor Advisory