Unrated
U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This...
CVE-2018-1000205
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-1000205 u-boot
- Ubuntu UBUNTU-CVE-2018-1000205 u-boot
Original description The description as published by the source.
U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.
References
- advisory lists.denx.de
- patch lists.denx.de