CVE-2022-39274

🗓️ 06 Oct 2022 00:00:00Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 57 Views

LoRaMac-node prior to 4.7.0 allows buffer overflow, leading to 65280-byte out-of-bounds write via improper size validation in `ProcessRadioRxDone` function

Reporter	Title	Published	Views	Family All 8
CNNVD	Semtech LoRaMac-node 安全漏洞	6 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-39274 Buffer Overflow in `ProcessRadioRxDone` in LoRaMac-node	6 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-41778	3 Oct 202520:07	–	euvd
NVD	CVE-2022-39274	6 Oct 202218:16	–	nvd
Prion	Buffer overflow	6 Oct 202218:16	–	prion
Positive Technologies	PT-2022-24862 · Unknown · Loramac-Node	6 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-39274	5 Feb 202519:41	–	redhatcve
Vulnrichment	CVE-2022-39274 Buffer Overflow in `ProcessRadioRxDone` in LoRaMac-node	6 Oct 202200:00	–	vulnrichment

NVD

Vulners

Node

semtech loramac-nodeRange<4.7.0

[
  {
    "vendor": "Lora-net",
    "product": "LoRaMac-node",
    "versions": [
      {
        "version": "< 4.7.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Lora-net/LoRaMac-node/releases/tag/v4.7.0
github	www.github.com/Lora-net/LoRaMac-node/security/advisories/GHSA-7vv8-73pc-63c2
github	www.github.com/Lora-net/LoRaMac-node/commit/e851b079c82ba1bcf3f4d291ab69a571b0bf458a