Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6xpg-gw5j-9x8w

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.

gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.

EPSS

Процентиль: 54%
0.00316
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-330

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 7 лет назад

gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.

CVSS3: 5.9
nvd
почти 7 лет назад

gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.

CVSS3: 5.9
debian
почти 7 лет назад

gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 la ...

suse-cvrf
около 5 лет назад

Security update for u-boot

suse-cvrf
около 5 лет назад

Security update for u-boot

EPSS

Процентиль: 54%
0.00316
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-330