Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-11690
HistoryMay 03, 2019 - 1:29 p.m.

Design/Logic Flaw

2019-05-0313:29:00
PRIOn knowledge base
www.prio-n.com
1

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%

gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.

CPENameOperatorVersion
u-bootge2014.04
u-bootle2019.04

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.8%