Sign-up

ID

VAR-201811-0056


CVE

CVE-2018-18439


TITLE

DENX U-Boot Buffer error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2018-012819

DESCRIPTION

DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image. DENX U-Boot Contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Das U-Boot is prone to multiple local arbitrary code-execution vulnerabilities. Attackers can exploit these issues to execute arbitrary code in the context of the U-Boot instance. Failed exploit attempts will likely cause a denial-of-service condition

Trust: 1.98

sources: NVD: CVE-2018-18439 // JVNDB: JVNDB-2018-012819 // BID: 105852 // VULMON: CVE-2018-18439

AFFECTED PRODUCTS

vendor:denxmodel:u-bootscope:ltversion:2018.09

Trust: 1.0

vendor:denxmodel:u-bootscope:eqversion:2018.09

Trust: 1.0

vendor:denx engineeringmodel:u-bootscope:lteversion:2018.09-rc1

Trust: 0.8

vendor:denxmodel:das u-bootscope:eqversion:2018.09.rc1

Trust: 0.6

vendor:u bootmodel:das u-bootscope:eqversion:0

Trust: 0.3

sources: BID: 105852 // JVNDB: JVNDB-2018-012819 // CNNVD: CNNVD-201811-236 // NVD: CVE-2018-18439

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-18439
value: CRITICAL

Trust: 1.0

NVD: CVE-2018-18439
value: CRITICAL

Trust: 0.8

CNNVD: CNNVD-201811-236
value: CRITICAL

Trust: 0.6

VULMON: CVE-2018-18439
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2018-18439
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

nvd@nist.gov: CVE-2018-18439
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2018-18439
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULMON: CVE-2018-18439 // JVNDB: JVNDB-2018-012819 // CNNVD: CNNVD-201811-236 // NVD: CVE-2018-18439

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.8

sources: JVNDB: JVNDB-2018-012819 // NVD: CVE-2018-18439

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201811-236

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201811-236

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-012819

PATCH
title:Das U-Boot -- the Universal Boot Loaderurl:https://www.denx.de/wiki/U-Boot/WebHome
Trust: 0.8
title: - url:https://github.com/Live-Hack-CVE/CVE-2018-18439 
Trust: 0.1
title:advisoriesurl:https://github.com/f-secure-foundry/advisories 
Trust: 0.1
title:advisoriesurl:https://github.com/inversepath/advisories 
Trust: 0.1
sources:
            
            
            VULMON: CVE-2018-18439 // 
            
            
            
            JVNDB: JVNDB-2018-012819

EXTERNAL IDS
db:NVDid:CVE-2018-18439
Trust: 2.8
db:OPENWALLid:OSS-SECURITY/2018/11/02/2
Trust: 2.5
db:JVNDBid:JVNDB-2018-012819
Trust: 0.8
db:CNNVDid:CNNVD-201811-236
Trust: 0.6
db:BIDid:105852
Trust: 0.4
db:VULMONid:CVE-2018-18439
Trust: 0.1
sources:
            
            
            VULMON: CVE-2018-18439 // 
            
            
            
            BID: 105852 // 
            
            
            
            JVNDB: JVNDB-2018-012819 // 
            
            
            
            CNNVD: CNNVD-201811-236 // 
            
            
            
            NVD: CVE-2018-18439

REFERENCES
url:http://www.openwall.com/lists/oss-security/2018/11/02/2
Trust: 2.5
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-18439
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-18439
Trust: 0.8
url:https://seclists.org/oss-sec/2018/q4/125
Trust: 0.3
url:https://www.denx.de/wiki/u-boot/webhome
Trust: 0.3
url:https://github.com/inversepath/usbarmory/blob/master/software/secure_boot/security_advisory-ref_ipvr2018-0001.txt
Trust: 0.3
url:https://cwe.mitre.org/data/definitions/119.html
Trust: 0.1
url:https://github.com/live-hack-cve/cve-2018-18439
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://www.securityfocus.com/bid/105852
Trust: 0.1
url:https://github.com/f-secure-foundry/advisories
Trust: 0.1
sources:
            
            
            VULMON: CVE-2018-18439 // 
            
            
            
            BID: 105852 // 
            
            
            
            JVNDB: JVNDB-2018-012819 // 
            
            
            
            CNNVD: CNNVD-201811-236 // 
            
            
            
            NVD: CVE-2018-18439

CREDITS
in collaboration with Quarkslab.,Inverse Path team at F-Secure
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-201811-236

SOURCES
db:VULMONid:CVE-2018-18439
db:BIDid:105852
db:JVNDBid:JVNDB-2018-012819
db:CNNVDid:CNNVD-201811-236
db:NVDid:CVE-2018-18439

LAST UPDATE DATE
2024-11-23T21:32:11.336000+00:00

SOURCES UPDATE DATE
db:VULMONid:CVE-2018-18439date:2023-01-23T00:00:00
db:BIDid:105852date:2018-11-02T00:00:00
db:JVNDBid:JVNDB-2018-012819date:2019-02-08T00:00:00
db:CNNVDid:CNNVD-201811-236date:2023-01-28T00:00:00
db:NVDid:CVE-2018-18439date:2024-11-21T03:55:56.347

SOURCES RELEASE DATE
db:VULMONid:CVE-2018-18439date:2018-11-20T00:00:00
db:BIDid:105852date:2018-11-02T00:00:00
db:JVNDBid:JVNDB-2018-012819date:2019-02-08T00:00:00
db:CNNVDid:CNNVD-201811-236date:2018-11-09T00:00:00
db:NVDid:CVE-2018-18439date:2018-11-20T19:29:00.620