Vulnerability index

Browse CVEs

47 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

U Boot CRITICAL 9.8
CVE-2019-14195

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block…

Fix: after 2019.07
Fix from $2,300 2019-07-31
U Boot CRITICAL 9.8
CVE-2019-14196

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.

Fix: after 2019.07
Fix from $2,300 2019-07-31
U Boot CRITICAL 9.8
CVE-2019-14198

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_b…

Fix: after 2019.07
Fix from $2,300 2019-07-31
U Boot CRITICAL 9.8
CVE-2019-14199

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet in…

Fix: after 2019.07
Fix from $2,300 2019-07-31
U Boot CRITICAL 9.8
CVE-2019-14200

An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_r…

Fix: after 2019.07
Fix from $2,300 2019-07-31
U Boot CRITICAL 9.8
CVE-2019-14201

An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_r…

Fix: after 2019.07
Fix from $2,300 2019-07-31
U Boot CRITICAL 9.8
CVE-2019-14202

An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink…

Fix: after 2019.07
Fix from $2,300 2019-07-31
U Boot CRITICAL 9.8
CVE-2019-14203

An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_re…

Fix: after 2019.07
Fix from $2,300 2019-07-31
U Boot CRITICAL 9.1
CVE-2019-14197

An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.

Fix: after 2019.07
Fix from $2,300 2019-07-31
U Boot HIGH 7.1
CVE-2019-13103

A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to gro…

Fix: 2019.04+
Fix from $1,950 2019-07-29
U Boot CRITICAL 9.8
CVE-2019-11059

Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.

Fix: after 2019.04
Fix from $2,300 2019-05-10
U Boot MEDIUM 5.9
CVE-2019-11690

gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios…

Fix: after 2019.04
Fix from $1,600 2019-05-03
U Boot HIGH 7.0
CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions …

Fix: after 2014.07
Fix from $1,950 2019-03-21
U Boot CRITICAL 9.8
CVE-2018-18439

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, loca…

Fix: 2018.09+
Fix from $2,300 2018-11-20
U Boot HIGH 7.8
CVE-2018-18440

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled.

Fix: after 2018.07
Fix from $1,950 2018-11-20
U Boot MEDIUM 6.4
CVE-2017-3226

Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryptio…

Fix: 2017.09+
Fix from $1,600 2018-07-24
U Boot MEDIUM 5.5
CVE-2018-1000205

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This…

Fix: after 2018.07
Fix from $1,600 2018-06-26