PatchTheCVEadvancecomp vulnerabilities and fixes
Recent CVEs affecting advancecomp, with upgrade or downgrade steps. 8 tracked.
advancecomp has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-06-06. Highest priority: CVE-2022-35020 (score 34/100).
- CVE-2023-2961 LOW 3.3 UPGRADE A segmentation fault flaw was found in the Advancecomp package
- CVE-2022-35020 MEDIUM 5.5 DOWNGRADE MITIGATE Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /s
- CVE-2022-35019 MEDIUM 5.5 DOWNGRADE MITIGATE Advancecomp v2.3 was discovered to contain a segmentation fault.
- CVE-2022-35018 MEDIUM 5.5 DOWNGRADE MITIGATE Advancecomp v2.3 was discovered to contain a segmentation fault.
- CVE-2022-35017 MEDIUM 5.5 DOWNGRADE MITIGATE Advancecomp v2.3 was discovered to contain a heap buffer overflow.
- CVE-2022-35016 MEDIUM 5.5 DOWNGRADE MITIGATE Advancecomp v2.3 was discovered to contain a heap buffer overflow.
- CVE-2022-35015 MEDIUM 5.5 DOWNGRADE MITIGATE Advancecomp v2.3 was discovered to contain a heap buffer overflow via le_uint32_read at /lib/endianrw.h.
- CVE-2022-35014 MEDIUM 5.5 DOWNGRADE MITIGATE Advancecomp v2.3 contains a segmentation fault.
FAQ
How do I fix advancecomp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is advancecomp being exploited right now?
None of the tracked advancecomp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which advancecomp CVE should I patch first?
CVE-2022-35020 currently ranks highest (34/100): Advancecomp v2.3 was discovered to contain a heap buffer overflow via the component __interceptor_memcpy at /s.