Описание
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2020.10+dfsg-1ubuntu0~18.04.2 |
| devel | not-affected | 2020.04+dfsg-2ubuntu1 |
| disco | ignored | end of life |
| eoan | ignored | end of life |
| esm-infra-legacy/trusty | DNE | |
| esm-infra/bionic | released | 2020.10+dfsg-1ubuntu0~18.04.2 |
| esm-infra/focal | released | 2021.01+dfsg-3ubuntu0~20.04.3 |
| esm-infra/xenial | not-affected | code not present |
| focal | released | 2021.01+dfsg-3ubuntu0~20.04.3 |
| groovy | not-affected | 2020.04+dfsg-2ubuntu1 |
Показывать по
EPSS
8.3 High
CVSS2
7.8 High
CVSS3
Связанные уязвимости
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much ...
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.
Уязвимость функции memset() загрузчика U-Boot, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
EPSS
8.3 High
CVSS2
7.8 High
CVSS3