Debian/arm-trusted-firmware: high 7.4
Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger da
Action: Upgrade arm-trusted-firmware to 2.9.0+dfsg-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.0+dfsg-3 | - |
Fixed versions
| 2.9.0+dfsg-3 |
Sources
- osv: DEBIAN-CVE-2022-47630#Debian:14/arm-trusted-firmware
- https://security-tracker.debian.org/tracker/CVE-2022-47630
published · modified · JSON