Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1000205

Опубликовано: 26 июн. 2018
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*
Версия до 2018.07 (включая)

EPSS

Процентиль: 40%
0.00182
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

ubuntu логотип

CVE-2018-1000205

CVSS3: 5.5
ubuntu
больше 7 лет назад

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.

debian логотип

CVE-2018-1000205

CVSS3: 5.5
debian
больше 7 лет назад

U-Boot contains a CWE-20: Improper Input Validation vulnerability in V ...

github логотип

GHSA-8frp-j862-qcw3

CVSS3: 5.5
github
больше 3 лет назад

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.

EPSS

Процентиль: 40%
0.00182
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20