u-boot-rpi3 (SUSE:Linux Enterprise Server 12 SP3-LTSS) — known CVEs & security advisories
Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP3-LTSS package u-boot-rpi3, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (19)
CVE-2019-11059 — CVSS 9.8 (critical): Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.
CVE-2019-14200 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function…
CVE-2019-14201 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function…
CVE-2019-14202 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function…
CVE-2019-14203 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function…
CVE-2019-14204 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function…
CVE-2019-14299 — CVSS 9.8 (critical): Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account…
CVE-2019-14192 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a…
CVE-2019-14193 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in…
CVE-2019-14194 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when…
CVE-2019-14195 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the…
CVE-2019-14196 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.
CVE-2019-14198 — CVSS 9.8 (critical): An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when…
CVE-2019-14197 — CVSS 9.1 (critical): An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.
CVE-2020-10648 — CVSS 7.8 (high): Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a…
CVE-2019-13103 — CVSS 7.1 (high): A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the…
CVE-2019-11690 — CVSS 5.9 (medium): gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in…