PT-2018-14465
CVE-2018-18440
·
Published
2018-11-20
·
Updated
2019-12-10
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
DENX U-Boot versions prior to 2018.09-rc1
Description
The issue arises from mishandled filesystem loading, leading to a locally exploitable buffer overflow when a crafted kernel image is used.
Recommendations
For versions prior to 2018.09-rc1, update to a version that properly handles filesystem loading to prevent the buffer overflow.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾