The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5764-1 advisory.

    It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker     could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute     arbitrary code. (CVE-2022-2347)

    Nicolas Bidron and Nicolas Guigo discovered that U-Boot incorrectly handled certain fragmented IP packets.
    A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or     possibly execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu     22.04 LTS. (CVE-2022-30552, CVE-2022-30790)

    It was discovered that U-Boot incorrectly handled certain NFS lookup replies. A remote attacker could use     this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code.
    This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-30767)

    Jincheng Wang discovered that U-Boot incorrectly handled certain SquashFS structures. A local attacker     could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute     arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.
    (CVE-2022-33103)

    Tatsuhiko Yasumatsu discovered that U-Boot incorrectly handled certain SquashFS structures. A local     attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly     execute arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.
    (CVE-2022-33967)

    It was discovered that U-Boot incorrectly handled the i2c command. A local attacker could use this issue     to cause U-Boot to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue     only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2022-34835)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length     field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to     the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a     `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.(CVE-2022-2347)

Tenable has extracted the preceding description block directly from the EulerOS uboot-tools security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the uboot-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    There exists an unchecked length field in UBoot.The U-Boot DFU implementation does not bound the length     field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to     the specified command.Consequently, if a physical attacker crafts a USB DFU download setup packet with a     `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.(CVE-2022-2347)

Tenable has extracted the preceding description block directly from the EulerOS uboot-tools security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    There exists an unchecked length field in UBoot.The U-Boot DFU implementation does not bound the length     field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to     the specified command.Consequently, if a physical attacker crafts a USB DFU download setup packet with a     `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.(CVE-2022-2347)

Tenable has extracted the preceding description block directly from the EulerOS uboot-tools security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the uboot-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length     field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to     the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a     `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.(CVE-2022-2347)

Tenable has extracted the preceding description block directly from the EulerOS uboot-tools security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 23.04 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6523-1 advisory.

    It was discovered that U-Boot incorrectly handled certain USB DFU download setup packets. A local attacker     could use this issue to cause U-Boot to crash, resulting in a denial of service, or possibly execute     arbitrary code. (CVE-2022-2347)

    Nicolas Bidron and Nicolas Guigo discovered that U-Boot incorrectly handled certain fragmented IP packets.
    A local attacker could use this issue to cause U-Boot to crash, resulting in a denial of service, or     possibly execute arbitrary code. (CVE-2022-30552, CVE-2022-30790)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the u package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length     field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to     the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a     `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
    (CVE-2022-2347)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
168465	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : U-Boot vulnerabilities (USN-5764-1)	Nessus	Ubuntu Local Security Checks	12/7/2022	8/27/2024	critical
214164	EulerOS 2.0 SP9 : uboot-tools (EulerOS-SA-2025-1047)	Nessus	Huawei Local Security Checks	1/14/2025	1/14/2025	high
210650	EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2024-2916)	Nessus	Huawei Local Security Checks	11/8/2024	11/8/2024	high
210679	EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2024-2896)	Nessus	Huawei Local Security Checks	11/8/2024	11/8/2024	high
214160	EulerOS 2.0 SP9 : uboot-tools (EulerOS-SA-2025-1064)	Nessus	Huawei Local Security Checks	1/14/2025	1/14/2025	high
186443	Ubuntu 22.04 LTS / 23.04 : u-boot-nezha vulnerability (USN-6523-1)	Nessus	Ubuntu Local Security Checks	11/29/2023	8/28/2024	high
203414	Photon OS 4.0: U PHSA-2023-4.0-0329	Nessus	PhotonOS Local Security Checks	7/23/2024	7/23/2024	high
203985	Photon OS 3.0: U PHSA-2023-3.0-0528	Nessus	PhotonOS Local Security Checks	7/24/2024	7/24/2024	high
229711	Linux Distros Unpatched Vulnerability : CVE-2022-2347	Nessus	Misc.	3/5/2025	3/5/2025	high

Detections

Analytics

Plugins Search

critical

high

high

high

high

high

high

high

high