Information on source package u-boot

Available versions

ReleaseVersion
bullseye2021.01+dfsg-5
bookworm2023.01+dfsg-2+deb12u1
trixie2024.01+dfsg-5
sid2024.01+dfsg-5

Open issues

BugbullseyebookwormtrixiesidDescription
CVE-2022-34835vulnerable (no DSA)fixedfixedfixedIn Das U-Boot through 2022.07-rc5, an integer signedness error and res ...
CVE-2022-33967vulnerable (no DSA)fixedfixedfixedsquashfs filesystem implementation of U-Boot versions from v2020.10-rc ...
CVE-2022-33103vulnerable (no DSA)fixedfixedfixedDas U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an ...
CVE-2022-30790vulnerable (no DSA)fixedfixedfixedDas U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2 ...
CVE-2022-30767vulnerable (no DSA, ignored)fixedfixedfixednfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and throu ...
CVE-2022-30552vulnerable (no DSA)fixedfixedfixedDas U-Boot 2022.01 has a Buffer Overflow.
CVE-2022-2347vulnerable (no DSA)fixedfixedfixedThere exists an unchecked length field in UBoot. The U-Boot DFU implem ...
CVE-2021-27138vulnerable (no DSA)fixedfixedfixedThe boot loader in Das U-Boot before 2021.04-rc2 mishandles use of uni ...
CVE-2021-27097vulnerable (no DSA)fixedfixedfixedThe boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified ...

Open unimportant issues

BugbullseyebookwormtrixiesidDescription
CVE-2018-1000205vulnerablevulnerablevulnerablevulnerableU-Boot contains a CWE-20: Improper Input Validation vulnerability in V ...
CVE-2018-18440vulnerablevulnerablevulnerablevulnerableDENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overf ...
CVE-2018-18439vulnerablevulnerablevulnerablevulnerableDENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer over ...
CVE-2017-3226vulnerablevulnerablevulnerablevulnerableDas U-Boot is a device bootloader that can read its configuration from ...
CVE-2017-3225vulnerablevulnerablevulnerablevulnerableDas U-Boot is a device bootloader that can read its configuration from ...

Resolved issues

BugDescription
CVE-2020-10648Das U-Boot through 2020.01 allows attackers to bypass verified boot re ...
CVE-2020-8432In Das U-Boot through 2020.01, a double free has been found in the cmd ...
CVE-2019-14204An issue was discovered in Das U-Boot through 2019.07. There is a stac ...
CVE-2019-14203An issue was discovered in Das U-Boot through 2019.07. There is a stac ...
CVE-2019-14202An issue was discovered in Das U-Boot through 2019.07. There is a stac ...
CVE-2019-14201An issue was discovered in Das U-Boot through 2019.07. There is a stac ...
CVE-2019-14200An issue was discovered in Das U-Boot through 2019.07. There is a stac ...
CVE-2019-14199An issue was discovered in Das U-Boot through 2019.07. There is an unb ...
CVE-2019-14198An issue was discovered in Das U-Boot through 2019.07. There is an unb ...
CVE-2019-14197An issue was discovered in Das U-Boot through 2019.07. There is a read ...
CVE-2019-14196An issue was discovered in Das U-Boot through 2019.07. There is an unb ...
CVE-2019-14195An issue was discovered in Das U-Boot through 2019.07. There is an unb ...
CVE-2019-14194An issue was discovered in Das U-Boot through 2019.07. There is an unb ...
CVE-2019-14193An issue was discovered in Das U-Boot through 2019.07. There is an unb ...
CVE-2019-14192An issue was discovered in Das U-Boot through 2019.07. There is an unb ...
CVE-2019-13106Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much ...
CVE-2019-13105Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a ...
CVE-2019-13104In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow c ...
CVE-2019-13103A crafted self-referential DOS partition table will cause all Das U-Bo ...
CVE-2019-11690gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 la ...
CVE-2019-11059Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit exte ...
CVE-2018-3968An exploitable vulnerability exists in the verified boot protection of ...

Search for package or bug name: Reporting problems