Lucene search

Ubuntu.comUB:CVE-2024-6564

HistoryJul 08, 2024 - 12:00 a.m.

CVE-2024-6564

2024-07-0800:00:00

ubuntu.com

buffer overflow

rcar_dev_init

untrusted data

secure boot bypass

arm-trusted-firmware

unix

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

JSON

Buffer overflow in “rcar_dev_init” due to using due to using untrusted
data (rcar_image_number) as a loop counter before verifying it against
RCAR_MAX_BL3X_IMAGE. This could lead to a full bypass of secure boot.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1076042>

Notes

Author	Note
eslerm	u-boot is built with arm-trusted-firmware

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarcharm-trusted-firmware< anyUNKNOWN
ubuntu22.04noarcharm-trusted-firmware< anyUNKNOWN
ubuntu24.04noarcharm-trusted-firmware< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	arm-trusted-firmware	< any	UNKNOWN
ubuntu	22.04	noarch	arm-trusted-firmware	< any	UNKNOWN
ubuntu	24.04	noarch	arm-trusted-firmware	< any	UNKNOWN

References

asrg.io/security-advisories/cve-2024-6564/

github.com/renesas-rcar/arm-trusted-firmware/commit/c9fb3558410032d2660c7f3b7d4b87dec09fe2f2

launchpad.net/bugs/cve/CVE-2024-6564

nvd.nist.gov/vuln/detail/CVE-2024-6564

security-tracker.debian.org/tracker/CVE-2024-6564

www.cve.org/CVERecord?id=CVE-2024-6564

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

Low

JSON

Related for UB:CVE-2024-6564