UBUNTU-CVE-2022-47630
- Source
- https://ubuntu.com/security/CVE-2022-47630
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-47630.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-47630
- Upstream
- Published
- 2023-01-16T16:15:00Z
- Modified
- 2025-07-14T06:46:11.359330Z
- Severity
-
- 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- - medium
- Summary
- [none]
- Details
-
Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of getext and authnvctr. Attackers might be able to trigger dangerous read side effects or obtain sensitive information about microarchitectural state.
- References
Affected packages
Ubuntu:Pro:20.04:LTS / arm-trusted-firmware
Package
- Name
- arm-trusted-firmware
- Purl
- pkg:deb/ubuntu/arm-trusted-firmware@2.2-2?arch=source&distro=esm-apps/focal
Ubuntu:22.04:LTS / arm-trusted-firmware
Package
- Name
- arm-trusted-firmware
- Purl
- pkg:deb/ubuntu/arm-trusted-firmware@2.6+dfsg-1?arch=source&distro=jammy
Ubuntu:24.04:LTS / arm-trusted-firmware
Package
- Name
- arm-trusted-firmware
- Purl
- pkg:deb/ubuntu/arm-trusted-firmware@2.10.0+dfsg-1build2?arch=source&distro=noble