{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"u-boot","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":[],"id":"tcs_01M5NCDQWNKP770AY4D1VZKD0W","modified_at":"2026-09-01T20:03:47.940841802Z","published_at":"2018-07-24T15:29:00.983Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-3226","https://security-tracker.debian.org/tracker/CVE-2017-3226"],"severity":{"label":"medium","score":6.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-3226#Debian:14/u-boot","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-3226"}],"summary":"Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption (i.e., setti"}