Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

SUSE-SU-2022:2058-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2022:2058-1

SUSE-SU-2022:2058-1

CRITICAL9.6

Security update for u-boot

Published Jun 13, 2022

Modified 3 years ago

Fix available

Details

Description of the patch:

This update for u-boot fixes the following issues:

A large buffer overflow could have lead to a denial of service in the IP Packet deframentation code. (CVE-2022-30552, bsc#1200363)
A Hole Descriptor Overwrite could have lead to an arbitrary out of bounds write primitive. (CVE-2022-30790, bsc#1200364)

Affected Packages

u-boot-rpi3

SUSE Linux Enterprise Server 12 SP3-LTSS

Fixed in:

2016.07-12.6.1

u-boot-tools

SUSE Linux Enterprise Server 12 SP3-LTSS

Fixed in:

2016.07-12.6.1

References

https://bugzilla.suse.com/1200363

https://bugzilla.suse.com/1200364

https://lists.suse.com/pipermail/sle-security-updates/2022-June/011273.html

https://www.suse.com/security/cve/CVE-2022-30552/

https://www.suse.com/security/cve/CVE-2022-30790/

https://www.suse.com/support/security/rating/

https://www.suse.com/support/update/announcement/2022/suse-su-20222058-1/

CVSS Analysis

CVSS v3.1

9.6

Exploitability

Attack Vector

AdjacentAV:A

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

9.6/CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Upstream

CVE-2022-30552 CVE-2022-30790

Ecosystems

SUSE Linux Enterprise Server 12 SP3-LTSS

Timeline

PublishedJun 13, 2022

ModifiedJun 13, 2022