Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2019:2235-1

Опубликовано: 01 окт. 2019
Источник: suse-cvrf

Описание

Security update for u-boot

This update for u-boot fixes the following issues:

Security issues fixed:

  • CVE-2019-13106: Fixed stack buffer overflow via a crafted ext4 filesystem that may lead to code execution (bsc#1144656).
  • CVE-2019-13104: Fixed an underflow that could cause memcpy() to overwrite a very large amount of data via a crafted ext4 filesystem (bsc#1144675).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
u-boot-tools-2018.03-lp150.4.3.1

Ссылки

Описание

In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.

Затронутые продукты
openSUSE Leap 15.0:u-boot-tools-2018.03-lp150.4.3.1
Ссылки

Описание

Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.

Затронутые продукты
openSUSE Leap 15.0:u-boot-tools-2018.03-lp150.4.3.1
Ссылки