PatchTheCVEgenivi vulnerabilities
Recent CVEs affecting genivi products. 4 tracked.
genivi has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-10-25. Highest priority: CVE-2022-31291 (score 52/100).
- CVE-2022-39837 MEDIUM 5.5 UPGRADE An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8
- CVE-2022-39836 MEDIUM 5.5 UPGRADE An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8
- CVE-2022-31291 HIGH 7.5 DOWNGRADE MITIGATE An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted
- CVE-2021-29507 MEDIUM 5.7 UPGRADE GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface
FAQ
How do I fix genivi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is genivi being exploited right now?
None of the tracked genivi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which genivi CVE should I patch first?
CVE-2022-31291 currently ranks highest (52/100): An issue in dlt_config_file_parser.c of dlt-daemon v2.18.8 allows attackers to cause a double free via crafted.