CVE-2018-18439

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image...

CVE-2018-18440

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled...

DEBIAN-CVE-2018-18440

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled...

UBUNTU-CVE-2018-18439

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image...

Buffer overflow

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image...

UBUNTU-CVE-2018-18440

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled...

CVE-2018-18440

CVE-2018-18440 affects DENX U-Boot up to version 2018.09-rc1, which has a locally exploitable buffer overflow in the filesystem loading path when processing a crafted kernel image. The root issue is mishandling of filesystem loading in U-Boot, enabling a local attacker to exploit the overflow and...

CVE-2018-18440

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled...

CVE-2018-18439

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image...

CVE-2018-18440

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled...

CVE-2018-18439

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image...

CVE-2018-18440

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled...

CVE-2018-18439

DENX U-Boot (through 2018.09-rc1) is affected by CVE-2018-18439 due to a remotely exploitable buffer overflow in TFTP handling and an additional local exploit path via a crafted kernel image. The vulnerability enables network-triggered overflow via a malicious TFTP server and also allows local ex...

PT-2018-14463 · Denx +1 · U-Boot +1

Name of the Vulnerable Software and Affected Versions: DENX U-Boot versions through 2018.09-rc1 Description: The issue is a buffer overflow that can be exploited remotely through a malicious TFTP server due to mishandled TFTP traffic. Additionally, local exploitation is possible via a crafted...

PT-2018-14465

Name of the Vulnerable Software and Affected Versions DENX U-Boot versions prior to 2018.09-rc1 Description The issue arises from mishandled filesystem loading, leading to a locally exploitable buffer overflow when a crafted kernel image is used. Recommendations For versions prior to 2018.09-rc1,...

CVE-2018-18440: Improper Restriction of Operations within the Bounds of a Memory Buffer

DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled...

CVE-2018-18439: Improper Restriction of Operations within the Bounds of a Memory Buffer

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image...

WS-2018-0604

U-Boot before v2018.09-rc2 is vulnerable to a buffer overflow which can lead to a potential code execution...

CVE-2017-3226

Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption i.e., setting the configuration parameter CONFIGENVAES=y read environment variables from disk as the encrypte...

Code injection

Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot's use of a zero initialization vector may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt...