Поиск уязвимостей
Количество 7
Количество 7
GHSA-57ww-qgjv-3g3c
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
CVE-2022-2347
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
CVE-2022-2347
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
CVE-2022-2347
There exists an unchecked length field in UBoot. The U-Boot DFU implem ...
BDU:2025-13599
Уязвимость компонента drivers/usb/gadget/f_dfu.c загрузчика U-Boot, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании
ALT-PU-2022-2727
ALT-PU-2022-2727: package `u-boot-tools` update to version 2022.10-alt1
ALT-PU-2023-4892
ALT-PU-2023-4892: package `u-boot-tools` update to version 2023.07-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-57ww-qgjv-3g3c There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer. | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
 | CVE-2022-2347 There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer. | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
 | CVE-2022-2347 There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer. | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
| CVE-2022-2347 There exists an unchecked length field in UBoot. The U-Boot DFU implem ... | CVSS3: 7.1 | 1% Низкий | около 4 лет назад |
 | BDU:2025-13599 Уязвимость компонента drivers/usb/gadget/f_dfu.c загрузчика U-Boot, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании | CVSS3: 7.7 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-2727 ALT-PU-2022-2727: package `u-boot-tools` update to version 2022.10-alt1 | CVSS3: 7.7 | 1% Низкий | около 4 лет назад |
| ALT-PU-2023-4892 ALT-PU-2023-4892: package `u-boot-tools` update to version 2023.07-alt1 | CVSS3: 9.8 | около 3 лет назад |
Уязвимостей на страницу