Lucene search
+L

148 matches found

Prion
Prion
•added 2019/05/06 11:29 p.m.•31 views

Integer overflow

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SnapdragonHighMed2016...

7.2CVSS7.8AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
•added 2019/05/06 11:29 p.m.•30 views

CVE-2017-18173

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SnapdragonHighMed2016...

7.8CVSS7.8AI score0.00227EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/05/06 10:34 p.m.•42 views

CVE-2017-18173

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SnapdragonHighMed2016...

7.8AI score0.00227EPSS
SaveExploits0References1
CVE
CVE
•added 2019/05/06 10:34 p.m.•67 views

CVE-2017-18173

CVE-2017-18173 involves an integer underflow in Snapdragon Mobile when processing an invalid Android verified boot signature with very large length. Affected devices include Qualcomm Snapdragon SoCs such as SD 425, 427, 430, 435, 450, 625, 810, 820, 835, SDM630, SDM636, SDM660 and Snapdragon_High...

7.8CVSS7.2AI score0.00227EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/06 12:00 a.m.•6 views

CVE-2017-18173: Integer Overflow or Wraparound

In case of using an invalid android verified boot signature with very large length, an integer underflow occurs in Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, SnapdragonHighMed2016...

7.8CVSS5.7AI score0.00227EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/05/06 12:00 a.m.•4 views

PT-2019-8266

Name of the Vulnerable Software and Affected Versions Snapdragon Mobile in SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 810, SD 820, SD 835, SDM630, SDM636, SDM660, Snapdragon High Med 2016 Description The issue occurs when an invalid Android verified boot signature with a very large length...

7.8CVSS0.00227EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/03/21 5:29 p.m.•37 views

CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...

8.2CVSS7.1AI score0.00276EPSS
SaveExploits1References2
OSV
OSV
•added 2019/03/21 5:29 p.m.•12 views

UBUNTU-CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...

8.2CVSS5.8AI score0.00276EPSS
SaveExploits1References3
Prion
Prion
•added 2019/03/21 5:29 p.m.•26 views

Format string

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...

4.4CVSS6.7AI score0.00276EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2019/03/21 5:29 p.m.•33 views

CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...

8.2CVSS7AI score0.00276EPSS
SaveExploits1References1
OSV
OSV
•added 2019/03/21 5:29 p.m.•18 views

DEBIAN-CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...

7CVSS6.8AI score0.00276EPSS
SaveExploits1References1
OSV
OSV
•added 2019/03/21 5:29 p.m.•28 views

CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...

7CVSS6.6AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2019/03/21 4:36 p.m.•40 views

CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...

8.2CVSS6.7AI score0.00276EPSS
SaveExploits1References1
Mend
Mend
•added 2019/03/21 4:36 p.m.•5 views

CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...

9.3CVSS0.00276EPSS
SaveExploits1References2
CVE
CVE
•added 2019/03/21 4:36 p.m.•102 views

CVE-2018-3968

The vulnerability CVE-2018-3968 affects Das U-Boot versions 2013.07-rc1 through 2014.07-rc2, where verified boot lacks proper FIT signature enforcement. This allows a local attacker who can supply a boot image to bypass verified boot and execute an unsigned kernel embedded in a legacy image forma...

8.2CVSS6.6AI score0.00276EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
•added 2019/03/21 4:36 p.m.•58 views

CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legac...

8.2CVSS7.3AI score0.00276EPSS
SaveExploits1
OSV
OSV
•added 2019/03/21 4:29 p.m.•18 views

CVE-2018-3969

An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerabilit...

7.8CVSS5.9AI score0.00501EPSS
SaveExploits1References1
NVD
NVD
•added 2019/03/21 4:29 p.m.•36 views

CVE-2018-3969

An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerabilit...

8.2CVSS7.8AI score0.00501EPSS
SaveExploits1References1
Prion
Prion
•added 2019/03/21 4:29 p.m.•26 views

Design/Logic Flaw

An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerabilit...

7.2CVSS7.6AI score0.00501EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/03/21 3:26 p.m.•46 views

CVE-2018-3969

An exploitable vulnerability exists in the verified boot protection of the CUJO Smart Firewall. It is possible to add arbitrary shell commands into the dhcpd.conf file, that persist across reboots and firmware updates, and thus allow for executing unverified commands. To trigger this vulnerabilit...

8.2CVSS7.6AI score0.00501EPSS
SaveExploits1References1
Rows per page
Query Builder