Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
denx u-boot vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2019-14195
An issue exists in Das U-Boot up to and including 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.
Denx U-boot
7.5
CVSSv2
CVE-2019-14198
An issue exists in Das U-Boot up to and including 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.
Denx U-boot
7.5
CVSSv2
CVE-2019-14203
An issue exists in Das U-Boot up to and including 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
Denx U-boot
4.4
CVSSv2
CVE-2017-3226
Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption (i.e., setting the configuration parameter CONFIG_ENV_AES=y) read environment variables...
Denx U-boot
7.5
CVSSv2
CVE-2019-14193
An issue exists in Das U-Boot up to and including 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.
Denx U-boot
7.5
CVSSv2
CVE-2019-14194
An issue exists in Das U-Boot up to and including 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
Denx U-boot
7.5
CVSSv2
CVE-2019-14196
An issue exists in Das U-Boot up to and including 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.
Denx U-boot
6.4
CVSSv2
CVE-2019-14197
An issue exists in Das U-Boot up to and including 2019.07. There is a read of out-of-bounds data at nfs_read_reply.
Denx U-boot
7.5
CVSSv2
CVE-2019-14199
An issue exists in Das U-Boot up to and including 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
Denx U-boot
7.5
CVSSv2
CVE-2019-14200
An issue exists in Das U-Boot up to and including 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.
Denx U-boot
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
IMAP
CVE-2024-4367
server-side request forgery
information disclosure
CVE-2024-34342
CVE-2024-4281
CVE-2024-3507
CVE-2024-25560
CVE-2024-34574
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »