Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 25/10/2022 Updated: 27/10/2022

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 0

An issue exists in Connected Vehicle Systems Alliance (COVESA) dlt-daemon up to and including 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte.

Vulnerable Product	Search on Vulmon	Subscribe to Product
genivi diagnostic log and trace

COVESA versions 2188 and below suffer from heap buffer over-read and null pointer dereference vulnerabilities ...

CWE-125 https://seclists.org/fulldisclosure/2022/Sep/24 https://sec-consult.com/vulnerability-lab/advisory/multiple-memory-corruption-vulnerabilities-in-covesa-dlt-daemon/https://nvd.nist.gov https://packetstormsecurity.com/files/168535/COVESA-2.18.8-NULL-Pointer-Dereference-Heap-Buffer-Over-Read.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-39836

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect