Vulnerabilities

TI-2022-18356 CVE-2022-38934 · GHSA-49x8-xrpp-pg4g

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.

MEDIUM 49

readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00276 Published 2022-09-28 No fix listed CWE-125

TI-2022-18355 CVE-2022-38932 · GHSA-f2hc-4phx-xcm3

HIGH 72

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00307 Published 2022-09-27 No fix listed CWE-787

TI-2021-14850 CVE-2021-36710 · GHSA-cgmv-c2qg-xxqx

LOW 38

ToaruOS 1.99.2 is affected by incorrect access control via the kernel.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0035 Published 2022-06-08 No fix listed CWE-668