CVE-2020-10648

LLM-synthesized narrative grounded in this CVE's description and references.

• Denx/U Boot2 versions

  cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*range: <2018.03
  • cpe:2.3:a:denx:u-boot:2020.01:-:*:*:*:*:*:*
• OpenSUSE/Leap

  cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*
• U-Boot/U-Bootdescription
• U Boot/U Bootllm-fuzzy

  Range: <=2020.01
• osv-coords23 versions

  pkg:rpm/opensuse/u-boot&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/u-boot&distro=openSUSE%20Leap%2015.2pkg:rpm/suse/u-boot&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/u-boot-rpiarm64&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

  < 2019.01-lp151.6.13.1+ 22 more

  • (no CPE)range: < 2019.01-lp151.6.13.1
  • (no CPE)range: < 2020.01-lp152.9.9.1
  • (no CPE)range: < 2016.07-12.3.1
  • (no CPE)range: < 2018.03-4.6.1
  • (no CPE)range: < 2018.03-4.6.1
  • (no CPE)range: < 2019.01-7.10.1
  • (no CPE)range: < 2020.01-10.9.1
  • (no CPE)range: < 2016.07-12.3.1
  • (no CPE)range: < 2018.03-4.3.1
  • (no CPE)range: < 2019.01-5.3.1
  • (no CPE)range: < 2018.03-4.6.1
  • (no CPE)range: < 2019.01-5.3.1
  • (no CPE)range: < 2018.03-4.6.1
  • (no CPE)range: < 2016.07-12.3.1
  • (no CPE)range: < 2018.03-4.6.2
  • (no CPE)range: < 2018.03-4.6.2
  • (no CPE)range: < 2019.01-7.10.2
  • (no CPE)range: < 2016.07-12.3.1
  • (no CPE)range: < 2018.03-4.3.1
  • (no CPE)range: < 2019.01-5.3.1
  • (no CPE)range: < 2018.03-4.6.2
  • (no CPE)range: < 2019.01-5.3.1
  • (no CPE)range: < 2020.01-10.9.1

• github.com/u-boot/u-boot/commits/masternvdPatchThird Party Advisory
• labs.f-secure.com/advisories/das-u-boot-verified-boot-bypass/nvdExploitThird Party Advisory
• lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.htmlnvdThird Party Advisory
• www.openwall.com/lists/oss-security/2020/03/18/5nvdMailing ListThird Party Advisory
• cert-portal.siemens.com/productcert/html/ssa-577017.htmlnvd

• Siemens Ruggedcom Rox
  CISA ICS Advisories