CVE-2020-10648

2020-03-1914:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.1%

JSON

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.

CPENameOperatorVersion
u-booteqU-Boot-0_4_0
u-booteq2017.03-rc2
u-booteq2017.11-rc4
u-booteq2018.01-rc3
u-booteq2016.05-rc1
u-booteq2014.07
u-booteq2015.01
u-booteq2009.01-rc2
u-booteqLABEL_2003_04_15_1900
u-booteqLABEL_2003_06_29_0145

Name	Operator	Version
u-boot	eq	U-Boot-0_4_0
u-boot	eq	2017.03-rc2
u-boot	eq	2017.11-rc4
u-boot	eq	2018.01-rc3
u-boot	eq	2016.05-rc1
u-boot	eq	2014.07
u-boot	eq	2015.01
u-boot	eq	2009.01-rc2
u-boot	eq	LABEL_2003_04_15_1900
u-boot	eq	LABEL_2003_06_29_0145