CVE-2014-4325

The cmdboot function in app/aboot/aboot.c in the Little Kernel LK bootloader, as distributed with Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to bypass intended device-lock and kernel-signature restrictions by using fastboot mode in a...

CVE-2014-0974

The vulnerability CVE-2014-0974 affects the Little Kernel (LK) bootloader’s boot_linux_from_mmc function (app/aboot/aboot.c). The root cause is insufficient validation of a certain address value, which can allow an attacker to write data to a controllable memory location by initiating an attempte...

CVE-2014-4325

CVE-2014-4325 affects the cmd_boot function in app/aboot/aboot.c within the Little Kernel (LK) bootloader used in Qualcomm Innovation Center Android contributions for MSM devices. The vulnerability allows bypassing device-lock and kernel-signature restrictions by using fastboot mode to boot an ar...

CVE-2014-0973

CVE-2014-0973 affects the Little Kernel (LK) bootloader used with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices. The image_verify function in platform/msm_shared/image_verify.c does not ensure the digest size is consistent with the RSA_public_decrypt API, enabling bypass...

PT-2014-3988

Name of the Vulnerable Software and Affected Versions Little Kernel LK bootloader affected versions not specified Description The issue is related to the image verify function in the Little Kernel LK bootloader, which does not properly check the digest size consistency with the RSA public decrypt...

CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

DEBIAN-CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

Default credentials

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

CVE-2014-0246

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

PT-2014-3553

Name of the Vulnerable Software and Affected Versions SOSreport affected versions not specified Description The issue allows local users to obtain sensitive information by reading the archive where SOSreport stores the md5 hash of the GRUB bootloader password. Recommendations At the moment, there...

CVE-2014-0246: Undefined Security Weakness

SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive...

CVE-2013-4875

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

CVE-2013-4874

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

Design/Logic Flaw

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

Design/Logic Flaw

The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable...

CVE-2013-4875

The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt...

CVE-2013-4874

CVE-2013-4874 affects the Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4. The vulnerability allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable. Exploitation details ...