Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-30767

32
FAUCET Score

CVE-2022-30767 is a critical buffer overflow vulnerability in the nfs_lookup_reply function within Das U-Boot through version 2022.04 (and 2022.07-rc2), affecting products like Denx U-Boot and Fedora. This flaw, stemming from an incorrect fix for CVE-2019-14196, allows for unauthenticated remote code execution due to an unbounded memcpy operation. With a CVSS score of 9.8, it presents a severe risk of complete compromise (confidentiality, integrity, availability) with low attack complexity. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not widely targeted at this time.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2022.04CPE matchmatch criteria
cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*
2022.07CPE matchmatch criteria
cpe:2.3:a:denx:u-boot:2022.07:rc1:*:*:*:*:*:*
2022.07CPE matchmatch criteria
cpe:2.3:a:denx:u-boot:2022.07:rc2:*:*:*:*:*:*
36CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.61%
Probability of exploitation in next 30 days
EPSS Percentile
83.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0261 is in the 74th percentile among its peer group of 36,833 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

github_advisorypatch availablevia nvd_reference
View patch

Vendor Advisories (1)

microsoft2022-May/CVE-2022-30767

nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.

May 10, 2022

References

lists.debian.org / debian-lts-announce/2025/05/msg00001.html
github.com / u-boot/u-boot/commit/5d14ee4e53a81055d34ba280cb8fd90330f22a96
PatchThird Party Advisory
lists.denx.de / pipermail/u-boot/2022-May/483952.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB
securitylab.github.com / research/uboot-rce-nfs-vulnerability
ExploitThird Party Advisory
source.denx.de / u-boot/u-boot/-/commit/bdbf7a05e26f3c5fd437c99e2755ffde186ddc80
PatchVendor Advisory