CVSS 7.8 · High EPSS 0,56%
Kerentanan Out-of-bounds Write pada denx u-boot. Skor CVSS 3.1 7.8 (High) menurut NVD.
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| denx | u-boot | Versi 2020.10 rc2 |
| denx | u-boot | Versi 2020.10 rc3 |
| denx | u-boot | Versi 2020.10 rc4 |
| denx | u-boot | Versi 2020.10 rc5 |
| denx | u-boot | Versi 2021.01 |
| denx | u-boot | Versi 2021.01 rc1 |
| denx | u-boot | Versi 2021.01 rc2 |
| denx | u-boot | Versi 2021.01 rc3 |
| denx | u-boot | Versi 2021.01 rc4 |
| denx | u-boot | Versi 2021.01 rc5 |
| denx | u-boot | Versi 2021.04 rc1 |
| denx | u-boot | Versi 2021.04 rc2 |
| denx | u-boot | Versi 2022.01 |
| denx | u-boot | Versi 2022.01 rc1 |
| denx | u-boot | Versi 2022.01 rc2 |
| denx | u-boot | Versi 2022.01 rc3 |
| denx | u-boot | Versi 2022.01 rc4 |
| denx | u-boot | Versi 2022.04 |
| denx | u-boot | Versi 2022.04 rc1 |
| denx | u-boot | Versi 2022.04 rc2 |
| denx | u-boot | Versi 2022.04 rc3 |
| denx | u-boot | Versi 2022.04 rc4 |
| denx | u-boot | Versi 2022.04 rc5 |
| denx | u-boot | Versi 2022.07 rc1 |
| denx | u-boot | Versi 2022.07 rc2 |
| denx | u-boot | Versi 2022.07 rc3 |
| denx | u-boot | Versi 2022.07 rc4 |
| denx | u-boot | Versi 2022.07 rc5 |