Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xh96-vq46-m9ww

Опубликовано: 23 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.

EPSS

Процентиль: 49%
0.00598
Низкий

8.1 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 2 лет назад

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.

CVSS3: 8.1
nvd
около 2 лет назад

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.

msrc
9 месяцев назад

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.

CVSS3: 8.1
debian
около 2 лет назад

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from ...

CVSS3: 8.1
altlinux
9 месяцев назад

ALT-PU-2026-5709: package `u-boot-tools` update to version 2026.01-alt1

EPSS

Процентиль: 49%
0.00598
Низкий

8.1 High

CVSS3

Дефекты

CWE-120