Vulnerability-Lookup

CVE-2018-1000205 (GCVE-0-2018-1000205)

Vulnerability from cvelistv5 – Published: 2018-06-26 16:00 – Updated: 2024-09-17 04:09

Summary

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

Assigner

mitre

References

2 references

URL	Tags
https://lists.denx.de/pipermail/u-boot/2018-June/…	x_refsource_MISC
https://lists.denx.de/pipermail/u-boot/2018-June/…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T12:40:46.902Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2018-06-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-26T16:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_ASSIGNED": "2018-06-24T19:45:25.923093",
          "DATE_REQUESTED": "2018-06-04T01:44:22",
          "ID": "CVE-2018-1000205",
          "REQUESTER": "teddy.reed@gmail.com",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html",
              "refsource": "MISC",
              "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html"
            },
            {
              "name": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html",
              "refsource": "MISC",
              "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-1000205",
    "datePublished": "2018-06-26T16:00:00.000Z",
    "dateReserved": "2018-06-26T00:00:00.000Z",
    "dateUpdated": "2024-09-17T04:09:48.784Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2018-1000205",
      "date": "2026-07-27",
      "epss": "0.00713",
      "percentile": "0.49873"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"2018.07\", \"matchCriteriaId\": \"F35CB70F-CD3F-4E4B-A967-40D090F9E070\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.\"}, {\"lang\": \"es\", \"value\": \"U-Boot contiene una vulnerabilidad CWE-20: validaci\\u00f3n de entradas incorrecta en la validaci\\u00f3n de firma de arranque verificada que puede resultar en un arranque con la verificaci\\u00f3n omitida. Este ataque parece ser explotable mediante una imagen FIT especialmente manipulada y una funcionalidad especial de la memoria del dispositivo.\"}]",
      "id": "CVE-2018-1000205",
      "lastModified": "2024-11-21T03:39:56.053",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:N/I:P/A:N\", \"baseScore\": 4.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
      "published": "2018-06-26T16:29:00.307",
      "references": "[{\"url\": \"https://lists.denx.de/pipermail/u-boot/2018-June/330454.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://lists.denx.de/pipermail/u-boot/2018-June/330898.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Mailing List\", \"Mitigation\", \"Vendor Advisory\"]}, {\"url\": \"https://lists.denx.de/pipermail/u-boot/2018-June/330454.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Patch\", \"Vendor Advisory\"]}, {\"url\": \"https://lists.denx.de/pipermail/u-boot/2018-June/330898.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Mitigation\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-20\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2018-1000205\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2018-06-26T16:29:00.307\",\"lastModified\":\"2024-11-21T03:39:56.053\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.\"},{\"lang\":\"es\",\"value\":\"U-Boot contiene una vulnerabilidad CWE-20: validaci\u00f3n de entradas incorrecta en la validaci\u00f3n de firma de arranque verificada que puede resultar en un arranque con la verificaci\u00f3n omitida. Este ataque parece ser explotable mediante una imagen FIT especialmente manipulada y una funcionalidad especial de la memoria del dispositivo.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2018.07\",\"matchCriteriaId\":\"F35CB70F-CD3F-4E4B-A967-40D090F9E070\"}]}]}],\"references\":[{\"url\":\"https://lists.denx.de/pipermail/u-boot/2018-June/330454.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://lists.denx.de/pipermail/u-boot/2018-June/330898.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Mailing List\",\"Mitigation\",\"Vendor Advisory\"]},{\"url\":\"https://lists.denx.de/pipermail/u-boot/2018-June/330454.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://lists.denx.de/pipermail/u-boot/2018-June/330898.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Mitigation\",\"Vendor Advisory\"]}]}}",
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-26T16:56:42Z",
      "cve": "CVE-2018-1000205",
      "id": "CVE-2018-1000205",
      "initial_release_date": "2023-02-15T04:20:03Z",
      "product_status:known_not_affected": "14",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2018-1000205",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2018-1000205.json",
      "version": "9"
    }
  }
}

CNVD-2018-23744

Vulnerability from cnvd - Published: 2018-11-21

Title

DENX Software Engineering U-Boot输入验证漏洞

Description

DENX Software Engineering U-Boot是德国DENX Software Engineering公司的一套可以从AES加密文件读取设备配置的引导加载程序。 DENX Software Engineering U-Boot中的Verified boot签名验证存在输入验证漏洞。攻击者可借助特制的FIT图像及设备内存功能利用该漏洞绕过签名检测。

Severity

中

Patch Name

DENX Software Engineering U-Boot输入验证漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://lists.denx.de/pipermail/u-boot/2018-June/330454.html

Reference

https://lists.denx.de/pipermail/u-boot/2018-June/330454.html

Impacted products

Name
DENX Software Engineering U-Boot

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-1000205",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000205"
    }
  },
  "description": "DENX Software Engineering U-Boot\u662f\u5fb7\u56fdDENX Software Engineering\u516c\u53f8\u7684\u4e00\u5957\u53ef\u4ee5\u4eceAES\u52a0\u5bc6\u6587\u4ef6\u8bfb\u53d6\u8bbe\u5907\u914d\u7f6e\u7684\u5f15\u5bfc\u52a0\u8f7d\u7a0b\u5e8f\u3002\n\nDENX Software Engineering U-Boot\u4e2d\u7684Verified boot\u7b7e\u540d\u9a8c\u8bc1\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684FIT\u56fe\u50cf\u53ca\u8bbe\u5907\u5185\u5b58\u529f\u80fd\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u7b7e\u540d\u68c0\u6d4b\u3002",
  "discovererName": "unknown",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://lists.denx.de/pipermail/u-boot/2018-June/330454.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-23744",
  "openTime": "2018-11-21",
  "patchDescription": "DENX Software Engineering U-Boot\u662f\u5fb7\u56fdDENX Software Engineering\u516c\u53f8\u7684\u4e00\u5957\u53ef\u4ee5\u4eceAES\u52a0\u5bc6\u6587\u4ef6\u8bfb\u53d6\u8bbe\u5907\u914d\u7f6e\u7684\u5f15\u5bfc\u52a0\u8f7d\u7a0b\u5e8f\u3002\r\n\r\nDENX Software Engineering U-Boot\u4e2d\u7684Verified boot\u7b7e\u540d\u9a8c\u8bc1\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684FIT\u56fe\u50cf\u53ca\u8bbe\u5907\u5185\u5b58\u529f\u80fd\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u7b7e\u540d\u68c0\u6d4b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "DENX Software Engineering U-Boot\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "DENX Software Engineering U-Boot"
  },
  "referenceLink": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html",
  "serverity": "\u4e2d",
  "submitTime": "2018-06-28",
  "title": "DENX Software Engineering U-Boot\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e"
}

FKIE_CVE-2018-1000205

Vulnerability from fkie_nvd - Published: 2018-06-26 16:29 - Updated: 2026-06-17 01:32

Severity

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Summary

References

URL	Tags
cve@mitre.org	https://lists.denx.de/pipermail/u-boot/2018-June/330454.html	Mailing List, Patch, Vendor Advisory
cve@mitre.org	https://lists.denx.de/pipermail/u-boot/2018-June/330898.html	Mailing List, Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://lists.denx.de/pipermail/u-boot/2018-June/330454.html	Mailing List, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://lists.denx.de/pipermail/u-boot/2018-June/330898.html	Mailing List, Mitigation, Vendor Advisory

Impacted products

	Vendor	Product	Version
	denx	u-boot	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F35CB70F-CD3F-4E4B-A967-40D090F9E070",
              "versionEndIncluding": "2018.07",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality."
    },
    {
      "lang": "es",
      "value": "U-Boot contiene una vulnerabilidad CWE-20: validaci\u00f3n de entradas incorrecta en la validaci\u00f3n de firma de arranque verificada que puede resultar en un arranque con la verificaci\u00f3n omitida. Este ataque parece ser explotable mediante una imagen FIT especialmente manipulada y una funcionalidad especial de la memoria del dispositivo."
    }
  ],
  "id": "CVE-2018-1000205",
  "lastModified": "2026-06-17T01:32:40.743",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-06-26T16:29:00.307",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mailing List",
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-8FRP-J862-QCW3

Vulnerability from github – Published: 2022-05-13 01:14 – Updated: 2022-05-13 01:14

Details

Severity

5.5 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2018-1000205"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-06-26T16:29:00Z",
    "severity": "MODERATE"
  },
  "details": "U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.",
  "id": "GHSA-8frp-j862-qcw3",
  "modified": "2022-05-13T01:14:22Z",
  "published": "2022-05-13T01:14:22Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000205"
    },
    {
      "type": "WEB",
      "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html"
    },
    {
      "type": "WEB",
      "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2018-1000205

Vulnerability from gsd - Updated: 2023-12-13 01:22

Details

Aliases

CVE-2018-1000205

Aliases

CVE-2018-1000205

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2018-1000205",
    "description": "U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.",
    "id": "GSD-2018-1000205",
    "references": [
      "https://www.suse.com/security/cve/CVE-2018-1000205.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2018-1000205"
      ],
      "details": "U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.",
      "id": "GSD-2018-1000205",
      "modified": "2023-12-13T01:22:27.638470Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "DATE_ASSIGNED": "2018-06-24T19:45:25.923093",
        "DATE_REQUESTED": "2018-06-04T01:44:22",
        "ID": "CVE-2018-1000205",
        "REQUESTER": "teddy.reed@gmail.com",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html",
            "refsource": "MISC",
            "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html"
          },
          {
            "name": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html",
            "refsource": "MISC",
            "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2018.07",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-1000205"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html",
              "refsource": "MISC",
              "tags": [
                "Mitigation",
                "Mailing List",
                "Vendor Advisory"
              ],
              "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html"
            },
            {
              "name": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html",
              "refsource": "MISC",
              "tags": [
                "Mailing List",
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": true
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2020-10-22T14:01Z",
      "publishedDate": "2018-06-26T16:29Z"
    }
  }
}

ubuntu-cve-2018-1000205

Vulnerability from osv_ubuntu

Published

2018-06-26 16:29

Modified

2025-10-24 04:47

Summary

Details

Severity

5.5 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

N/A (UNKNOWN)


                    
                      negligible

References

URL

Type

	https://ubuntu.com/security/CVE-2018-1000205	REPORT
	https://lists.denx.de/pipermail/u-boot/2018-June/…	REPORT
	https://lists.denx.de/pipermail/u-boot/2018-June/…	REPORT
	https://www.cve.org/CVERecord?id=CVE-2018-1000205	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "u-boot",
            "binary_version": "2016.01+dfsg1-2ubuntu5"
          },
          {
            "binary_name": "u-boot-exynos",
            "binary_version": "2016.01+dfsg1-2ubuntu5"
          },
          {
            "binary_name": "u-boot-imx",
            "binary_version": "2016.01+dfsg1-2ubuntu5"
          },
          {
            "binary_name": "u-boot-omap",
            "binary_version": "2016.01+dfsg1-2ubuntu5"
          },
          {
            "binary_name": "u-boot-rockchip",
            "binary_version": "2016.01+dfsg1-2ubuntu5"
          },
          {
            "binary_name": "u-boot-rpi",
            "binary_version": "2016.01+dfsg1-2ubuntu5"
          },
          {
            "binary_name": "u-boot-sunxi",
            "binary_version": "2016.01+dfsg1-2ubuntu5"
          },
          {
            "binary_name": "u-boot-tegra",
            "binary_version": "2016.01+dfsg1-2ubuntu5"
          },
          {
            "binary_name": "u-boot-tools",
            "binary_version": "2016.01+dfsg1-2ubuntu5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "u-boot",
        "purl": "pkg:deb/ubuntu/u-boot@2016.01+dfsg1-2ubuntu5?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2015.04+dfsg1-2ubuntu1",
        "2015.10+dfsg1-2",
        "2015.10+dfsg1-3",
        "2015.10+dfsg1-4",
        "2016.01+dfsg1-1",
        "2016.01+dfsg1-1ubuntu1",
        "2016.01+dfsg1-2ubuntu1",
        "2016.01+dfsg1-2ubuntu2",
        "2016.01+dfsg1-2ubuntu3",
        "2016.01+dfsg1-2ubuntu5"
      ]
    }
  ],
  "aliases": [],
  "details": "U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.",
  "id": "UBUNTU-CVE-2018-1000205",
  "modified": "2025-10-24T04:47:20Z",
  "published": "2018-06-26T16:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-1000205"
    },
    {
      "type": "REPORT",
      "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330454.html"
    },
    {
      "type": "REPORT",
      "url": "https://lists.denx.de/pipermail/u-boot/2018-June/330898.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000205"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "negligible",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-1000205"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2018-1000205 (GCVE-0-2018-1000205)

CNVD-2018-23744

FKIE_CVE-2018-1000205

GHSA-8FRP-J862-QCW3

GSD-2018-1000205

ubuntu-cve-2018-1000205

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature