VYPR

rpm package

suse/u-boot&distro=SUSE Linux Enterprise Server 15-LTSS

pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS

Vulnerabilities (21)

  • CVE-2019-11690May 3, 2019
    affected < 2018.03-4.6.1fixed 2018.03-4.6.1

    gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.

Page 2 of 2