1. Home
  2. CVE Database
  3. CVE-2018-1000205
MEDIUM · 5.5

CVE-2018-1000205

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially craf...

Vulnerability Description

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
DenxU-Boot<= 2018.07

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2018-1000205?

CVE-2018-1000205 is a vulnerability with a CVSS score of 5.5 (MEDIUM). U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially craf...

How severe is CVE-2018-1000205?

CVE-2018-1000205 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-1000205?

Check the references section above for vendor advisories and patch information. Affected products include: Denx U-Boot.