Diagnostic Log And Trace
Approved changes feed: RSS · Atom
cpe:2.3:a:genivi:diagnostic_log_and_trace:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Genivi (ac88af50-dee1-59bc-9ce3-8db4184b4057) |
|---|---|
| Product | Diagnostic Log And Trace (c91f89e4-b924-5384-a50c-31929a70d44a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/dlt-daemon |
purl2cpe | 2026-06-01 10:16:33.018307 |
pkg:deb/ubuntu/dlt-daemon |
purl2cpe | 2026-06-01 10:16:33.018310 |
pkg:github/genivi/dlt-daemon |
purl2cpe | 2026-06-01 10:16:33.018313 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-39837 |
vulnerable | 2026-06-08 05:47:18.840589 |
Details available
An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a NULL pointer dereference,
Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-07T14:20:44.196Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39836 |
vulnerable | 2026-06-08 05:47:18.839956 |
Details available
An issue was discovered in Connected Vehicle Systems Alliance (COVESA) dlt-daemon through 2.18.8. Due to a faulty DLT file parser, a crafted DLT file that crashes the process can be created. This is due to missing validation checks. There is a heap-based buffer over-read of one byte.
Published: 2022-10-24T00:00:00.000Z
Updated: 2025-05-07T14:22:21.841Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29507 |
vulnerable | 2026-06-08 05:31:26.506345 |
dlt-daemon could crash if there is special character in dlt.conf
MEDIUM (5.7)
GENIVI Diagnostic Log and Trace (DLT) provides a log and trace interface. In versions of GENIVI DLT between 2.10.0 and 2.18.6, a configuration file containing the special characters could cause a vulnerable component to crash. All the applications which are using the configuration file could fail to generate their dlt logs in system. As of time of publication, no patch exists. As a workaround, one may check the integrity of information in configuration file manually.
Published: 2021-05-28T21:00:16.000Z
Updated: 2024-08-03T22:11:05.507Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36244 |
vulnerable | 2026-06-08 05:25:02.899878 |
Details available
The daemon in GENIVI diagnostic log and trace (DLT), is vulnerable to a heap-based buffer overflow that could allow an attacker to remotely execute arbitrary code on the DLT-Daemon (versions prior to 2.18.6).
Published: 2021-02-10T00:00:00.000Z
Updated: 2024-08-04T17:23:09.856Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29394 |
vulnerable | 2026-06-08 05:24:58.209272 |
Details available
A buffer overflow in the dlt_filter_load function in dlt_common.c from dlt-daemon through 2.18.5 (GENIVI Diagnostic Log and Trace) allows arbitrary code execution because fscanf is misused (no limit on the number of characters to be read in the format argument).
Published: 2020-11-30T00:00:00.000Z
Updated: 2024-08-04T16:55:09.676Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.