[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2017-3225 -- u-boot

ID: oval:org.secpod.oval:def:2000303Date: (C)2019-06-02   (M)2023-12-20
Class: VULNERABILITYFamily: unix




Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot"s use of a zero initialization vector may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data. Das U-Boot"s AES-CBC encryption feature uses a zero initialization vector. This allows an attacker to perform dictionary attacks on encrypted data produced by Das U-Boot to learn information about the encrypted data.

Platform:
Debian 8.x
Debian 9.x
Product:
u-boot
Reference:
CVE-2017-3225
CVE    1
CVE-2017-3225
CPE    3
cpe:/o:debian:debian_linux:8.x
cpe:/o:debian:debian_linux:9.x
cpe:/a:denx:u-boot

© SecPod Technologies