CVE-2014-5118
published 2019-11-18CVE-2014-5118: Trusted Boot (tboot) before 1.8.2 has a 'loader.c' Security Bypass Vulnerability
PriorityP424medium5.5CVSS 3.1
AVLACLPRLUINSUCNIHAN
EPSS
0.39%
31.3th percentile
Trusted Boot (tboot) before 1.8.2 has a 'loader.c' Security Bypass Vulnerability
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| trusted_boot_project | trusted_boot | < 1.8.2 | 1.8.2 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fcqp-4gp4-9mfg: A Security Bypass Vulnerability exists in TBOOT before 1
ghsa_unreviewed·2022-05-17
CVE-2014-5118 [LOW] GHSA-fcqp-4gp4-9mfg: A Security Bypass Vulnerability exists in TBOOT before 1
A Security Bypass Vulnerability exists in TBOOT before 1.8.2 in the boot loader module when measuring commandline parameters.
Red Hat
tboot: argument measurement vulnerability for GRUB2+ELF kernels
vendor_redhat·2014-07-24·CVSS 5.5
CVE-2014-5118 [MEDIUM] tboot: argument measurement vulnerability for GRUB2+ELF kernels
tboot: argument measurement vulnerability for GRUB2+ELF kernels
Trusted Boot (tboot) before 1.8.2 has a 'loader.c' Security Bypass Vulnerability
Package: tboot (Red Hat Enterprise Linux 6) - Will not fix
No detection rules found.
No public exploits indexed.
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136768.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136778.htmlhttp://www.openwall.com/lists/oss-security/2014/07/30/4http://www.securityfocus.com/bid/68960https://exchange.xforce.ibmcloud.com/vulnerabilities/95063http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136768.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-August/136778.htmlhttp://www.openwall.com/lists/oss-security/2014/07/30/4http://www.securityfocus.com/bid/68960https://exchange.xforce.ibmcloud.com/vulnerabilities/95063
2019-11-18
Published