CyberSecBulletin

Buildroot vulnerabilities

We track 6 vulnerabilities in Buildroot products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on December 5, 2023.

6vulnerabilities
0critical
6high
0exploited
8.1average CVSS score

Latest Buildroot vulnerabilities

  • 8.1 High severity

    Buildroot: Download of Code Without Integrity Check

    CVE-2023-45842Buildroot

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne

  • 8.1 High severity

    Buildroot: Download of Code Without Integrity Check

    CVE-2023-45841Buildroot

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne

  • 8.1 High severity

    Buildroot: Download of Code Without Integrity Check

    CVE-2023-45840Buildroot

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne

  • 8.1 High severity

    Buildroot: Download of Code Without Integrity Check

    CVE-2023-45839Buildroot

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne

  • 8.1 High severity

    Buildroot: Download of Code Without Integrity Check

    CVE-2023-45838Buildroot

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne

  • 8.1 High severity

    Buildroot: Download of Code Without Integrity Check

    CVE-2023-43608Buildroot

    A data integrity vulnerability exists in the BR_NO_CHECK_HASH_FOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.