Lucene search

K
cvelistMitreCVELIST:CVE-2019-11690
HistoryMay 03, 2019 - 12:07 p.m.

CVE-2019-11690

2019-05-0312:07:21
mitre
www.cve.org

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%

gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%