Is the project affected by CVE-2024-20017? - Githubissues

hanwckf / immortalwrt-mt798x

Other

1.06k stars 576 forks source link

Is the project affected by CVE-2024-20017? #326

Closed 392media closed 1 day ago

392media commented 2 days ago

Describe the bug

https://corp.mediatek.com/product-security-bulletin/March-2024

Vendor says SDK version 7.6.7.0 and before (for MT7916, MT7981 and MT7986) are affected. Does the project include the vulnerable components?

ImmortalWrt version

21.02

ImmortalWrt target/subtarget

7981

Device

7981

Image kind

Official downloaded image

Steps to reproduce

No response

Actual behaviour

No response

Expected behaviour

No response

Additional info

No response

Diffconfig

No response

Terms

[X] I am reporting an issue for ImmortalWrt, not an unsupported fork.

hanwckf commented 1 day ago

https://github.com/hanwckf/immortalwrt-mt798x/issues/321