suse/u-boot&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS

Vulnerabilities (21)

• CVE-2022-34835CriJun 30, 2022
  affected < 2018.03-150000.4.11.1fixed 2018.03-150000.4.11.1

  In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

• CVE-2022-30790HigJun 8, 2022
  affected < 2018.03-150000.4.11.1fixed 2018.03-150000.4.11.1

  Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.

• CVE-2022-30552MedJun 8, 2022
  affected < 2018.03-150000.4.11.1fixed 2018.03-150000.4.11.1

  Das U-Boot 2022.01 has a Buffer Overflow.

• CVE-2020-10648HigMar 19, 2020
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.

• CVE-2020-8432Jan 29, 2020
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a

• CVE-2019-14204CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.

• CVE-2019-14203CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.

• CVE-2019-14202CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.

• CVE-2019-14201CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.

• CVE-2019-14200CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.

• CVE-2019-14199CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.

• CVE-2019-14198CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.

• CVE-2019-14197CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.

• CVE-2019-14196CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.

• CVE-2019-14195CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.

• CVE-2019-14194CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.

• CVE-2019-14193CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.

• CVE-2019-14192CriJul 31, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.

• CVE-2019-13103HigJul 29, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.

• CVE-2019-11059May 10, 2019
  affected < 2018.03-4.6.1fixed 2018.03-4.6.1

  Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.