CVE-2018-3968: An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack…

PriorityP431high7CVSS 3.1

AVLACHPRLUINSUCHIHAH

EPSS

0.28%

19.7th percentile

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legacy image format. To trigger this vulnerability, a local attacker needs to be able to supply the image to boot.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	u-boot	< u-boot 2014.07+dfsg1-1 (bookworm)	u-boot 2014.07+dfsg1-1 (bookworm)
denx	u-boot	—	—
denx	u-boot	—	—
denx	u-boot	>= 0 < 2014.07+dfsg1-1	2014.07+dfsg1-1
denx	u-boot	>= 0 < 2014.07+dfsg1-1	2014.07+dfsg1-1
denx	u-boot	>= 0 < 2014.07+dfsg1-1	2014.07+dfsg1-1
denx	u-boot	>= 0 < 2014.07+dfsg1-1	2014.07+dfsg1-1
denx	u-boot	2013.07 – 2014.07	—

CVSS provenance

nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv3.08.2HIGHCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P

osv7.0HIGH

vendor_debian7.0HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.