Debian/u-boot: critical 9.8
In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute
Action: Upgrade u-boot to 2020.01+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2020.01+dfsg-2 | - |
Fixed versions
| 2020.01+dfsg-2 |
Sources
- osv: DEBIAN-CVE-2020-8432#Debian:14/u-boot
- https://security-tracker.debian.org/tracker/CVE-2020-8432
published · modified · JSON