Browse CVEs

CRITICAL 9.8 CVE-2019-14195 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block… U Boot after 2019.07 Fix from $2,3002019-07-31 CRITICAL 9.8 CVE-2019-14196 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. U Boot after 2019.07 Fix from $2,3002019-07-31 CRITICAL 9.8 CVE-2019-14198 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_b… U Boot after 2019.07 Fix from $2,3002019-07-31 CRITICAL 9.8 CVE-2019-14199 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet in… U Boot after 2019.07 Fix from $2,3002019-07-31 CRITICAL 9.8 CVE-2019-14200 An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_r… U Boot after 2019.07 Fix from $2,3002019-07-31 CRITICAL 9.8 CVE-2019-14201 An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_r… U Boot after 2019.07 Fix from $2,3002019-07-31 CRITICAL 9.8 CVE-2019-14202 An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink… U Boot after 2019.07 Fix from $2,3002019-07-31 CRITICAL 9.8 CVE-2019-14203 An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_re… U Boot after 2019.07 Fix from $2,3002019-07-31 CRITICAL 9.1 CVE-2019-14197 An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply. U Boot after 2019.07 Fix from $2,3002019-07-31 HIGH 7.1 CVE-2019-13103 A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to gro… U Boot 2019.04+ Fix from $1,9502019-07-29 CRITICAL 9.8 CVE-2019-11059 Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow. U Boot after 2019.04 Fix from $2,3002019-05-10 MEDIUM 5.9 CVE-2019-11690 gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios… U Boot after 2019.04 Fix from $1,6002019-05-03 HIGH 7.0 CVE-2018-3968 An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions … U Boot after 2014.07 Fix from $1,9502019-03-21 CRITICAL 9.8 CVE-2018-18439 DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, loca… U Boot 2018.09+ Fix from $2,3002018-11-20 HIGH 7.8 CVE-2018-18440 DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled. U Boot after 2018.07 Fix from $1,9502018-11-20 MEDIUM 6.4 CVE-2017-3226 Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryptio… U Boot 2017.09+ Fix from $1,6002018-07-24 MEDIUM 5.5 CVE-2018-1000205 U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This… U Boot after 2018.07 Fix from $1,6002018-06-26