CVE-2018-18439

2018-11-2019:00:00

mitre

www.cve.org

9.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.3%

JSON

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image.

References

www.openwall.com/lists/oss-security/2018/11/02/2