Non évaluée
The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verific...
CVE-2020-25860
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2020-25860 rauc Corrigé dans: 1.5-1
Description d'origine La description telle que publiée par la source (souvent en anglais).
The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- report github.com
- report vdoo.com