Add checker for CVE-2022-2347

nccgroup / depthcharge

A U-Boot hacking toolkit for security researchers and tinkerers

https://depthcharge.readthedocs.io

BSD 3-Clause "New" or "Revised" License

251 stars 14 forks source link

Add checker for CVE-2022-2347 #105

Closed jynik closed 1 year ago

jynik commented 1 year ago

Refer to this advsiory by @sultanqasim for more information.

CONFIG_DFU_OVER_USB or CONFIG_SPL_DFU
v2012.10-rc1 to v2023.01-rc1 (Inclusive or exclusive?)

sultanqasim commented 1 year ago

Versions are inclusive - it was “fixed” in v2023.01-rc2, though the original fix broke DFU altogether. A fix for the fix to unbreak DFU made it to rc4.

jynik commented 1 year ago

Added in 0.5.0