CVE-2022-2347 - There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the le

CVE-2022-2347

Summary

There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.

References

https://seclists.org/oss-sec/2022/q3/41

Vulnerable Configurations

cpe:2.3:a:denx:u-boot:2012.10:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2012.10:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2012.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2012.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2012.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2012.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2012.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2012.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2012.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2012.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.01.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2013.10:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.07:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2014.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.04:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2015.10:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.01:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.03:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.05:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.09.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2016.11:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.03:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.05:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.09:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2017.11:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.03:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.05:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.09:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:*:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2018.11:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.04:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.07:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2019.10:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.01:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.04:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.07:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2020.10:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.01:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2021.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.01:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:-:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.04:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc1:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc2:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc3:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc4:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc5:*:*:*:*:*:*
cpe:2.3:a:denx:u-boot:2022.07:rc5:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-787

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

29-09-2022 - 13:51

Published

23-09-2022 - 13:15

Last modified

29-09-2022 - 13:51