[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

CVE-2017-3225 -- u-boot-tools

ID: oval:org.secpod.oval:def:1901446Date: (C)2019-06-18   (M)2023-12-20
Class: VULNERABILITYFamily: unix




Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot"s use of a zero initialization vector may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data. Das U-Boot"s AES-CBC encryption feature uses a zero initialization vector. This allows an attacker to perform dictionary attacks on encrypted data produced by Das U-Boot to learn information about the encrypted data.

Platform:
Ubuntu 16.04
Ubuntu 18.10
Ubuntu 18.04
Product:
u-boot-tools
Reference:
CVE-2017-3225
CVE    1
CVE-2017-3225
CPE    4
cpe:/a:u-boot:u-boot-tools
cpe:/o:ubuntu:ubuntu_linux:16.04
cpe:/o:ubuntu:ubuntu_linux:18.04
cpe:/o:ubuntu:ubuntu_linux:18.10
...

© SecPod Technologies