Debian/u-boot: high 7.1
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction cor
Action: Upgrade u-boot to 2023.01~rc4+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2023.01~rc4+dfsg-2 | - |
Fixed versions
| 2023.01~rc4+dfsg-2 |
Sources
published · modified · JSON