PT-2018-7260
CVE-2017-3225
·
تاريخ النشر
2018-07-24
·
تاريخ التحديث
2019-10-09
الوصف من
CVSS 3.1
4.6
متوسطةالمقاييسAV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Das U-Boot (affected versions not specified)
Description:
The issue concerns Das U-Boot's use of a zero initialization vector in its AES-CBC encryption feature, which may allow attacks against the underlying cryptographic implementation. This could enable an attacker to decrypt the data by performing dictionary attacks on encrypted data produced by Das U-Boot, potentially revealing information about the encrypted data.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾