Lucene search

K
osvGoogleOSV:CVE-2019-11690
HistoryMay 03, 2019 - 1:29 p.m.

CVE-2019-11690

2019-05-0313:29:00
Google
osv.dev
5

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.8%

gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.8%