SUSE-SU-2020:3255-1 Security update for u-boot

This update for u-boot fixes the following issues: CVE-2019-14192 bsc1143777, CVE-2019-14193 bsc1143817, CVE-2019-14199 bsc1143824, CVE-2019-14197 bsc1143821, CVE-2019-14200 bsc1143825, CVE-2019-14201 bsc1143827, CVE-2019-14202 bsc1143828, CVE-2019-14203 bsc1143830, CVE-2019-14204 bsc1143831,...

openSUSE Security Update : u-boot (openSUSE-2020-1869)

This update for u-boot fixes the following issues : - CVE-2020-8432: Fixed a double free in the cmd/gpt.c dorenamegptparts function, which allowed an attacker to execute arbitrary code bsc1162198 - CVE-2020-10648: Fixed improper signature verification during verified boot bsc1167209. This update...

openSUSE: Security Advisory for u-boot (openSUSE-SU-2020:1869-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1869-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2020-8432: Fixed a double free in the cmd/gpt.c dorenamegptparts function, which allowed an attacker to execute arbitrary code bsc1162198 - CVE-2020-10648: Fixed improper signature verification during verified boot bsc1167209. This update w...

Security update for u-boot (important)

openSUSE Security Update: Security update for u-boot Announcement ID: openSUSE-SU-2020:1869-1 Rating: important References: 1162198 1167209 Cross-References: CVE-2020-10648 CVE-2020-8432 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available. Description:...

SUSE-SU-2020:3161-1 Security update for u-boot

This update for u-boot fixes the following issues: - CVE-2020-8432: Fixed a double free in the cmd/gpt.c dorenamegptparts function, which allowed an attacker to execute arbitrary code bsc1162198 - CVE-2020-10648: Fixed improper signature verification during verified boot bsc1167209...

CVE-2020-16261

Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access...

CVE-2020-16261

Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access...

Design/Logic Flaw

Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access...

CVE-2020-16261

Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access...

CVE-2020-16261

CVE-2020-16261 affects Winston 1.5.4 devices. The vulnerability arises from a U-Boot interrupt that can grant local root access, indicating a component/root-cause issue at boot-time or firmware control paths. The available sources describe the impact as local root access with confidentiality, int...

CVE-2019-16258

The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface...

CVE-2019-16258

The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface...

Hardcoded credentials

The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface...

CVE-2019-16258

The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface...

Das U-Boot Input Validation Error Vulnerability

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. An input validation error vulnerability exists in Das U-Boot 2020.01 and earlier versions, which can be...

CVE-2020-10648

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

CVE-2020-10648

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

Default configuration

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...

CVE-2020-10648

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration...