BootStomp - A Bootloader Vulnerability Finder

🗓️ 09 Dec 2017 21:11:00Reported by KitPloitType

BootStomp is a boot-loader bug finder, looking for memory corruption and state storage vulnerabilities. Instructions for running BootStomp using docker and manually provided. It works with ARM architectures (32 and 64 bits both)

Reporter	Title	Published	Views	Family All 7
CNVD	Huawei Honor 5A Bootloader Buffer Overflow Vulnerability	3 Mar 201700:00	–	cnvd
CVE	CVE-2017-2729	22 Nov 201719:00	–	cve
Cvelist	CVE-2017-2729	22 Nov 201719:00	–	cvelist
EUVD	EUVD-2017-11872	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Buffer Overflow Vulnerability in the Boot Loaders of Huawei Mobile Phones	2 Mar 201700:00	–	huawei
NVD	CVE-2017-2729	22 Nov 201719:29	–	nvd
Prion	Buffer overflow	22 Nov 201719:29	–	prion

Source	Link
github	www.github.com/osm0sis/boot-unlocker/blob/wiki/HowItWorks.md
github	www.github.com/sogeti-esec-lab/hbootdbg
ge0n0sis	www.ge0n0sis.github.io/posts/2016/05/how-to-lock-the-samsung-download-mode-using-an-undocumented-feature-of-aboot/
github	www.github.com/ucsb-seclab/BootStomp/tree/master/tools/huawei_tools
github	www.github.com/ariafan/MT65x2_kernel_lk
github	www.github.com/ucsb-seclab/BootStomp
sturmflut	www.sturmflut.github.io/mediatek/2015/07/04/mediatek-details-partitions-and-preloader

09 Dec 2017 21:11Current

7.6High risk

Vulners AI Score7.6

CVSS 29.3

CVSS 37.8

EPSS0.0017