rpm package

suse/u-boot-rpi3&distro=SUSE Linux Enterprise Server 15-LTSS

pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS

Vulnerabilities (21)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2022-34835	Cri	9.8	< 2018.03-150000.4.11.1	2018.03-150000.4.11.1	Jun 30, 2022	In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
CVE-2022-30790	Hig	7.8	< 2018.03-150000.4.11.1	2018.03-150000.4.11.1	Jun 8, 2022	Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.
CVE-2022-30552	Med	5.5	< 2018.03-150000.4.11.1	2018.03-150000.4.11.1	Jun 8, 2022	Das U-Boot 2022.01 has a Buffer Overflow.
CVE-2020-10648	Hig	7.8	< 2018.03-4.6.2	2018.03-4.6.2	Mar 19, 2020	Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.
CVE-2020-8432		—	< 2018.03-4.6.2	2018.03-4.6.2	Jan 29, 2020	In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a
CVE-2019-14204	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.
CVE-2019-14203	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
CVE-2019-14202	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.
CVE-2019-14201	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.
CVE-2019-14200	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.
CVE-2019-14199	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
CVE-2019-14198	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.
CVE-2019-14197	Cri	9.1	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.
CVE-2019-14196	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.
CVE-2019-14195	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.
CVE-2019-14194	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
CVE-2019-14193	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.
CVE-2019-14192	Cri	9.8	< 2018.03-4.6.2	2018.03-4.6.2	Jul 31, 2019	An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
CVE-2019-13103	Hig	7.1	< 2018.03-4.6.2	2018.03-4.6.2	Jul 29, 2019	A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.
CVE-2019-11059		—	< 2018.03-4.6.2	2018.03-4.6.2	May 10, 2019	Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.

CVE-2022-34835CriJun 30, 2022
affected < 2018.03-150000.4.11.1fixed 2018.03-150000.4.11.1
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
CVE-2022-30790HigJun 8, 2022
affected < 2018.03-150000.4.11.1fixed 2018.03-150000.4.11.1
Das U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.
CVE-2022-30552MedJun 8, 2022
affected < 2018.03-150000.4.11.1fixed 2018.03-150000.4.11.1
Das U-Boot 2022.01 has a Buffer Overflow.
CVE-2020-10648HigMar 19, 2020
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.
CVE-2020-8432Jan 29, 2020
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a
CVE-2019-14204CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.
CVE-2019-14203CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
CVE-2019-14202CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.
CVE-2019-14201CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.
CVE-2019-14200CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.
CVE-2019-14199CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
CVE-2019-14198CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.
CVE-2019-14197CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.
CVE-2019-14196CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.
CVE-2019-14195CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.
CVE-2019-14194CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
CVE-2019-14193CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.
CVE-2019-14192CriJul 31, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
CVE-2019-13103HigJul 29, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.
CVE-2019-11059May 10, 2019
affected < 2018.03-4.6.2fixed 2018.03-4.6.2
Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.

Page 1 of 2