denx u-boot 2019.07 vulnerabilities and exploits

(subscribe to this query)

3.6

CVSSv2

A crafted self-referential DOS partition table will cause all Das U-Boot versions up to and including 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.

Denx U-boot 2019.04 Denx U-boot Denx U-boot 2019.07

6.8

CVSSv2

Das U-Boot versions 2019.07-rc1 up to and including 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.

Denx U-boot 2019.07

6.8

CVSSv2

In Das U-Boot versions 2016.11-rc1 up to and including 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.

Denx U-boot 2019.07 Denx U-boot Opensuse Leap 15.0 Opensuse Leap 15.1

8.3

CVSSv2

Das U-Boot versions 2016.09 up to and including 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.

Denx U-boot 2019.07 Denx U-boot Opensuse Leap 15.0 Opensuse Leap 15.1

6.4

CVSSv2

An issue exists in Das U-Boot up to and including 2019.07. There is a read of out-of-bounds data at nfs_read_reply.

Denx U-boot

7.5

CVSSv2

An issue exists in Das U-Boot up to and including 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.

Denx U-boot

7.5

CVSSv2

An issue exists in Das U-Boot up to and including 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.

Denx U-boot

7.5

CVSSv2

An issue exists in Das U-Boot up to and including 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.

Denx U-boot

7.5

CVSSv2

An issue exists in Das U-Boot up to and including 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.

Denx U-boot

7.5

CVSSv2

An issue exists in Das U-Boot up to and including 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.

Denx U-boot

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook