Das U-Boot vulnerabilities
1 known vulnerability in Das U-Boot from DENX Software Engineering. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.0average CVSS score
Latest first
- 9.0 Critical severity
Das U-Boot: Incomplete Cleanup
Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fi