Поиск уязвимостей
Количество 37
Количество 37
ALT-PU-2023-4892
ALT-PU-2023-4892: package `u-boot-tools` update to version 2023.07-alt1
ALT-PU-2022-2236
ALT-PU-2022-2236: package `u-boot-tools` update to version 2022.07-alt1
CVE-2022-2347
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
CVE-2022-2347
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
CVE-2022-2347
There exists an unchecked length field in UBoot. The U-Boot DFU implem ...
GHSA-57ww-qgjv-3g3c
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
BDU:2025-13599
Уязвимость компонента drivers/usb/gadget/f_dfu.c загрузчика U-Boot, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
ALT-PU-2022-2727
ALT-PU-2022-2727: package `u-boot-tools` update to version 2022.10-alt1
CVE-2022-30767
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
CVE-2022-30767
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
CVE-2022-30767
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
CVE-2022-30767
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and throu ...
GHSA-27g3-5ffj-8mw8
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
BDU:2023-06308
Уязвимость функции nfs_lookup_reply (net/nfs.c) загрузчика U-Boot встроенных операционных систем на базе Linux, позволяющая нарушителю выполнить произвольный код
CVE-2022-33103
Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().
CVE-2022-33103
Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().
CVE-2022-33103
Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().
CVE-2022-33103
Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an ...
SUSE-SU-2022:2054-1
Security update for u-boot
SUSE-SU-2022:2053-1
Security update for u-boot
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2023-4892 ALT-PU-2023-4892: package `u-boot-tools` update to version 2023.07-alt1 | CVSS3: 9.8 | около 3 лет назад | |
| ALT-PU-2022-2236 ALT-PU-2022-2236: package `u-boot-tools` update to version 2022.07-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
 | CVE-2022-2347 There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer. | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
 | CVE-2022-2347 There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer. | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
| CVE-2022-2347 There exists an unchecked length field in UBoot. The U-Boot DFU implem ... | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
| GHSA-57ww-qgjv-3g3c There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer. | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
 | BDU:2025-13599 Уязвимость компонента drivers/usb/gadget/f_dfu.c загрузчика U-Boot, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.7 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-2727 ALT-PU-2022-2727: package `u-boot-tools` update to version 2022.10-alt1 | CVSS3: 7.7 | 1% Низкий | около 4 лет назад |
| CVE-2022-30767 nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| CVE-2022-30767 nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
 | CVE-2022-30767 nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196. | 3% Низкий | 9 месяцев назад | |
| CVE-2022-30767 nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and throu ... | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| GHSA-27g3-5ffj-8mw8 nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196. | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| BDU:2023-06308 Уязвимость функции nfs_lookup_reply (net/nfs.c) загрузчика U-Boot встроенных операционных систем на базе Linux, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 3% Низкий | больше 4 лет назад |
| CVE-2022-33103 Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir(). | CVSS3: 7.8 | 0% Низкий | больше 4 лет назад |
| CVE-2022-33103 Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir(). | CVSS3: 7.8 | 0% Низкий | больше 4 лет назад |
| CVE-2022-33103 Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir(). | 0% Низкий | около 1 года назад | |
| CVE-2022-33103 Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an ... | CVSS3: 7.8 | 0% Низкий | больше 4 лет назад |
 | SUSE-SU-2022:2054-1 Security update for u-boot | больше 4 лет назад | ||
| SUSE-SU-2022:2053-1 Security update for u-boot | больше 4 лет назад |
Уязвимостей на страницу