Lucene search
K

65 matches found

Positive Technologies
Positive Technologies
added 2024/05/03 12:0 a.m.4 views

PT-2024-25909 · Buildroot · Buildroot

Name of the Vulnerable Software and Affected Versions: Buildroot versions prior to 0b2967e Buildroot version 2024.02.2 and later are not affected, but all versions before 0b2967e are vulnerable. Since 2024.02.2 is the fixed version, we list all versions prior to 0b2967e as vulnerable. Description...

7.5CVSS6.8AI score0.00249EPSS
Exploits0References12
BDU FSTEC
BDU FSTEC
added 2023/12/22 12:0 a.m.1 views

The vulnerability in the Makefile file set for the Linux Buildroot operating system allows a hacker to execute a type of “man-in-the-middle” attack.

The vulnerability in the Makefile set for the Linux Buildroot operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute a “man-in-the-middle” type attack...

8.1CVSS7.6AI score0.00122EPSS
Exploits1References5Affected Software1
Talos Blog
Talos Blog
added 2023/12/06 6:33 p.m.33 views

Remote code execution vulnerabilities found in Buildroot, Foxit PDF Reader

Cisco Talos has disclosed 10 vulnerabilities over the past two weeks, including nine that exist in a popular online PDF reader that offers a browser plugin. Attackers could exploit these vulnerabilities in the Foxit PDF Reader to carry out a variety of malicious actions, but most notably could ga...

6.8CVSS8.6AI score0.00967EPSS
Exploits12
NVD
NVD
added 2023/12/05 12:15 p.m.13 views

CVE-2023-45839

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs-util...

8.1CVSS0.00089EPSS
Exploits1References3
NVD
NVD
added 2023/12/05 12:15 p.m.17 views

CVE-2023-45838

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs packa...

8.1CVSS0.00122EPSS
Exploits1References3
NVD
NVD
added 2023/12/05 12:15 p.m.9 views

CVE-2023-45841

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

8.1CVSS0.00089EPSS
Exploits1References3
NVD
NVD
added 2023/12/05 12:15 p.m.11 views

CVE-2023-45842

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the mxsldr...

8.1CVSS0.00089EPSS
Exploits1References3
OSV
OSV
added 2023/12/05 12:15 p.m.32 views

CVE-2023-45840

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

8.1CVSS7.2AI score
Exploits0References3
NVD
NVD
added 2023/12/05 12:15 p.m.15 views

CVE-2023-45840

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

8.1CVSS0.00089EPSS
Exploits1References3
OSV
OSV
added 2023/12/05 12:15 p.m.21 views

CVE-2023-45838

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs packa...

8.1CVSS7.2AI score
Exploits0References3
OSV
OSV
added 2023/12/05 12:15 p.m.24 views

CVE-2023-45839

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs-util...

8.1CVSS7.2AI score
Exploits0References3
OSV
OSV
added 2023/12/05 12:15 p.m.21 views

CVE-2023-45841

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

8.1CVSS7.2AI score
Exploits0References3
OSV
OSV
added 2023/12/05 12:15 p.m.21 views

CVE-2023-45842

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the mxsldr...

8.1CVSS7.2AI score
Exploits0References3
NVD
NVD
added 2023/12/05 12:15 p.m.13 views

CVE-2023-43608

A data integrity vulnerability exists in the BRNOCHECKHASHFOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder...

8.1CVSS0.00122EPSS
Exploits1References3
OSV
OSV
added 2023/12/05 12:15 p.m.19 views

CVE-2023-43608

A data integrity vulnerability exists in the BRNOCHECKHASHFOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder...

8.1CVSS7.1AI score
Exploits0References3
Prion
Prion
added 2023/12/05 12:15 p.m.23 views

Privilege escalation

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the mxsldr...

5.1CVSS7.5AI score0.00089EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2023/12/05 12:15 p.m.18 views

Privilege escalation

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs-util...

5.1CVSS7.5AI score0.00089EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2023/12/05 12:15 p.m.16 views

Design/Logic Flaw

A data integrity vulnerability exists in the BRNOCHECKHASHFOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder...

5.1CVSS7.3AI score0.00122EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2023/12/05 12:15 p.m.25 views

Privilege escalation

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the aufs packa...

5.1CVSS7.5AI score0.00122EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2023/12/05 12:15 p.m.24 views

Privilege escalation

Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulnerability is related to the...

5.1CVSS7.5AI score0.00089EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder