Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:2475-1

Опубликовано: 26 сент. 2019
Источник: suse-cvrf

Описание

Security update for u-boot

This update for u-boot fixes the following issues:

Security issues fixed:

  • CVE-2019-13106: Fixed stack buffer overflow via a crafted ext4 filesystem that may lead to code execution (bsc#1144656).
  • CVE-2019-13104: Fixed an underflow that could cause memcpy() to overwrite a very large amount of data via a crafted ext4 filesystem (bsc#1144675).

Список пакетов

SUSE Linux Enterprise Module for Basesystem 15 SP1
u-boot-rpi3-2019.01-7.3.1
u-boot-tools-2019.01-7.3.1

Ссылки

Описание

In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP1:u-boot-rpi3-2019.01-7.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP1:u-boot-tools-2019.01-7.3.1
Ссылки

Описание

Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.

Затронутые продукты
SUSE Linux Enterprise Module for Basesystem 15 SP1:u-boot-rpi3-2019.01-7.3.1
SUSE Linux Enterprise Module for Basesystem 15 SP1:u-boot-tools-2019.01-7.3.1
Ссылки