PT-2022-24621
CVE-2022-38932
·
Published
2022-09-27
·
Updated
2022-09-29
Description by
CVSS 3.1
8.4
HighMetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ToaruOS version 2.0.1
Description
The issue allows for remote code execution when a crafted ELF file is parsed, due to a global overflow in the readelf component.
Recommendations
For ToaruOS version 2.0.1, consider avoiding the use of readelf to parse untrusted ELF files until a patch is available. As a temporary workaround, restrict access to readelf to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾