Lucene search
K

46 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в u-boot

The U-Boot until 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

7.8CVSS7.6AI score0.00123EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/03/20 12:0 a.m.4 views

Barebox 数据伪造问题漏洞

Barebox is a versatile and flexible bootloader developed by Barebox Open Source. Versions of Barebox before 2025.09.3 and 2026.03.1 contained a data manipulation vulnerability. This vulnerability stemmed from the fact that the hashed-nodes attribute set by mkimage during the creation of FIT was n...

8.2CVSS5.7AI score0.00003EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 8:53 a.m.3 views

CVE-2021-27138

The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT...

7.8CVSS6.9AI score0.00059EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-3096

Malware in sbrugna...

7.8CVSS8.5AI score0.00123EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-10648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a...

7.8CVSS8.1AI score0.00123EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2018-1000205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack...

5.5CVSS5.7AI score0.00182EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 2:55 a.m.8 views

CVE-2018-1000205

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality...

5.5CVSS6.7AI score0.00182EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:20 a.m.4 views

SUSE CVE-2018-1000205

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality...

5.5CVSS6.9AI score0.00182EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:0 a.m.1 views

SUSE CVE-2020-10648

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

6.2CVSS7AI score0.00123EPSS
Exploits1References11
SUSE CVE
SUSE CVE
added 2023/02/15 3:44 a.m.1 views

SUSE CVE-2021-27097

The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT...

7.8CVSS7AI score0.00047EPSS
Exploits0References3
OSV
OSV
added 2021/02/17 11:15 p.m.0 views

ALPINE-CVE-2021-27138

The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT...

7.8CVSS6.9AI score0.00059EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2021/02/17 11:15 p.m.30 views

CVE-2021-27097

The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT...

7.8CVSS7.1AI score0.00047EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/20 12:0 a.m.1 views

Das U-Boot Input Validation Error Vulnerability

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. An input validation error vulnerability exists in Das U-Boot 2020.01 and earlier versions, which can be...

7.8CVSS7AI score0.00123EPSS
Exploits1References1
NVD
NVD
added 2020/03/19 2:15 p.m.18 views

CVE-2020-10648

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

7.8CVSS7.5AI score0.00123EPSS
Exploits1References5
OSV
OSV
added 2020/03/19 2:15 p.m.19 views

CVE-2020-10648

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

7.8CVSS6.8AI score
Exploits0References4
UbuntuCve
UbuntuCve
added 2020/03/19 2:15 p.m.27 views

CVE-2020-10648

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

7.8CVSS7.2AI score0.00123EPSS
Exploits1References4
Prion
Prion
added 2020/03/19 2:15 p.m.18 views

Default configuration

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

6.8CVSS7.5AI score0.00123EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2020/03/19 2:15 p.m.0 views

UBUNTU-CVE-2020-10648

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

7.8CVSS7.3AI score0.00123EPSS
Exploits1References5
CVE
CVE
added 2020/03/19 1:36 p.m.176 views

CVE-2020-10648

CVE-2020-10648 affects Das U-Boot up to version 2020.01, where an attacker could bypass verified boot restrictions and boot arbitrary images by supplying a crafted FIT image to a system configured to boot the default configuration. Connected advisories indicate this CVE is addressed in SUSE secur...

7.8CVSS8.4AI score0.00123EPSS
Exploits1References5Affected Software1
Debian CVE
Debian CVE
added 2020/03/19 1:36 p.m.29 views

CVE-2020-10648

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

7.8CVSS8.6AI score0.00123EPSS
Exploits1
Rows per page
Query Builder