suse-su-2020:3255-1
Vulnerability from csaf_suse
Published
2020-11-09 10:09
Modified
2020-11-09 10:09
Summary
Security update for u-boot
Notes
Title of the patch
Security update for u-boot
Description of the patch
This update for u-boot fixes the following issues:
CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817),
CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821),
CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827),
CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830),
CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818),
CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819),
CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463),
CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853),
CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209).
Fix USB keyboard problems (bsc#1160566).
Patchnames
SUSE-2020-3255,SUSE-SLE-SERVER-12-SP5-2020-3255
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for u-boot",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for u-boot fixes the following issues:\n\nCVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817), \nCVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821), \nCVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), \nCVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830), \nCVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818), \nCVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819), \nCVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463), \nCVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853), \nCVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209).\n\nFix USB keyboard problems (bsc#1160566).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2020-3255,SUSE-SLE-SERVER-12-SP5-2020-3255",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_3255-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2020:3255-1",
"url": "https://www.suse.com/support/update/announcement/2020/suse-su-20203255-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2020:3255-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2020-November/007734.html"
},
{
"category": "self",
"summary": "SUSE Bug 1134157",
"url": "https://bugzilla.suse.com/1134157"
},
{
"category": "self",
"summary": "SUSE Bug 1134853",
"url": "https://bugzilla.suse.com/1134853"
},
{
"category": "self",
"summary": "SUSE Bug 1143463",
"url": "https://bugzilla.suse.com/1143463"
},
{
"category": "self",
"summary": "SUSE Bug 1143777",
"url": "https://bugzilla.suse.com/1143777"
},
{
"category": "self",
"summary": "SUSE Bug 1143817",
"url": "https://bugzilla.suse.com/1143817"
},
{
"category": "self",
"summary": "SUSE Bug 1143818",
"url": "https://bugzilla.suse.com/1143818"
},
{
"category": "self",
"summary": "SUSE Bug 1143819",
"url": "https://bugzilla.suse.com/1143819"
},
{
"category": "self",
"summary": "SUSE Bug 1143820",
"url": "https://bugzilla.suse.com/1143820"
},
{
"category": "self",
"summary": "SUSE Bug 1143821",
"url": "https://bugzilla.suse.com/1143821"
},
{
"category": "self",
"summary": "SUSE Bug 1143823",
"url": "https://bugzilla.suse.com/1143823"
},
{
"category": "self",
"summary": "SUSE Bug 1143824",
"url": "https://bugzilla.suse.com/1143824"
},
{
"category": "self",
"summary": "SUSE Bug 1143825",
"url": "https://bugzilla.suse.com/1143825"
},
{
"category": "self",
"summary": "SUSE Bug 1143827",
"url": "https://bugzilla.suse.com/1143827"
},
{
"category": "self",
"summary": "SUSE Bug 1143828",
"url": "https://bugzilla.suse.com/1143828"
},
{
"category": "self",
"summary": "SUSE Bug 1143830",
"url": "https://bugzilla.suse.com/1143830"
},
{
"category": "self",
"summary": "SUSE Bug 1143831",
"url": "https://bugzilla.suse.com/1143831"
},
{
"category": "self",
"summary": "SUSE Bug 1160566",
"url": "https://bugzilla.suse.com/1160566"
},
{
"category": "self",
"summary": "SUSE Bug 1162198",
"url": "https://bugzilla.suse.com/1162198"
},
{
"category": "self",
"summary": "SUSE Bug 1167209",
"url": "https://bugzilla.suse.com/1167209"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11059 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11059/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-11690 page",
"url": "https://www.suse.com/security/cve/CVE-2019-11690/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-13103 page",
"url": "https://www.suse.com/security/cve/CVE-2019-13103/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14192 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14192/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14193 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14193/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14194 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14195 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14195/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14196 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14196/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14197 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14198 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14199 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14199/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14200 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14201 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14202 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14203 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2019-14204 page",
"url": "https://www.suse.com/security/cve/CVE-2019-14204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-10648 page",
"url": "https://www.suse.com/security/cve/CVE-2020-10648/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2020-8432 page",
"url": "https://www.suse.com/security/cve/CVE-2020-8432/"
}
],
"title": "Security update for u-boot",
"tracking": {
"current_release_date": "2020-11-09T10:09:12Z",
"generator": {
"date": "2020-11-09T10:09:12Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2020:3255-1",
"initial_release_date": "2020-11-09T10:09:12Z",
"revision_history": [
{
"date": "2020-11-09T10:09:12Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "u-boot-bananapim64-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-bananapim64-2019.01-5.3.1.aarch64",
"product_id": "u-boot-bananapim64-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-bananapim64-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-bananapim64-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-bananapim64-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-dragonboard410c-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-dragonboard410c-2019.01-5.3.1.aarch64",
"product_id": "u-boot-dragonboard410c-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-dragonboard410c-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-dragonboard410c-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-dragonboard410c-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-dragonboard820c-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-dragonboard820c-2019.01-5.3.1.aarch64",
"product_id": "u-boot-dragonboard820c-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-dragonboard820c-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-dragonboard820c-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-dragonboard820c-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-evb-rk3399-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-evb-rk3399-2019.01-5.3.1.aarch64",
"product_id": "u-boot-evb-rk3399-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-evb-rk3399-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-evb-rk3399-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-evb-rk3399-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-firefly-rk3399-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-firefly-rk3399-2019.01-5.3.1.aarch64",
"product_id": "u-boot-firefly-rk3399-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-firefly-rk3399-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-firefly-rk3399-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-firefly-rk3399-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-geekbox-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-geekbox-2019.01-5.3.1.aarch64",
"product_id": "u-boot-geekbox-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-geekbox-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-geekbox-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-geekbox-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-hikey-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-hikey-2019.01-5.3.1.aarch64",
"product_id": "u-boot-hikey-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-hikey-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-hikey-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-hikey-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-khadas-vim-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-khadas-vim-2019.01-5.3.1.aarch64",
"product_id": "u-boot-khadas-vim-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-khadas-vim-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-khadas-vim-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-khadas-vim-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-khadas-vim2-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-khadas-vim2-2019.01-5.3.1.aarch64",
"product_id": "u-boot-khadas-vim2-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-khadas-vim2-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-khadas-vim2-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-khadas-vim2-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-ls1012afrdmqspi-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-ls1012afrdmqspi-2019.01-5.3.1.aarch64",
"product_id": "u-boot-ls1012afrdmqspi-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-ls1012afrdmqspi-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-ls1012afrdmqspi-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-ls1012afrdmqspi-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-mvebudb-88f3720-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-mvebudb-88f3720-2019.01-5.3.1.aarch64",
"product_id": "u-boot-mvebudb-88f3720-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-mvebudb-88f3720-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-mvebudb-88f3720-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-mvebudb-88f3720-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-mvebudbarmada8k-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-mvebudbarmada8k-2019.01-5.3.1.aarch64",
"product_id": "u-boot-mvebudbarmada8k-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-mvebudbarmada8k-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-mvebudbarmada8k-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-mvebudbarmada8k-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-mvebuespressobin-88f3720-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-mvebuespressobin-88f3720-2019.01-5.3.1.aarch64",
"product_id": "u-boot-mvebuespressobin-88f3720-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-mvebuespressobin-88f3720-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-mvebuespressobin-88f3720-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-mvebuespressobin-88f3720-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-mvebumcbin-88f8040-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-mvebumcbin-88f8040-2019.01-5.3.1.aarch64",
"product_id": "u-boot-mvebumcbin-88f8040-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-mvebumcbin-88f8040-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-mvebumcbin-88f8040-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-mvebumcbin-88f8040-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-nanopia64-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-nanopia64-2019.01-5.3.1.aarch64",
"product_id": "u-boot-nanopia64-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-nanopia64-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-nanopia64-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-nanopia64-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-odroid-c2-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-odroid-c2-2019.01-5.3.1.aarch64",
"product_id": "u-boot-odroid-c2-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-odroid-c2-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-odroid-c2-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-odroid-c2-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-orangepipc2-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-orangepipc2-2019.01-5.3.1.aarch64",
"product_id": "u-boot-orangepipc2-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-orangepipc2-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-orangepipc2-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-orangepipc2-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-p2371-2180-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-p2371-2180-2019.01-5.3.1.aarch64",
"product_id": "u-boot-p2371-2180-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-p2371-2180-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-p2371-2180-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-p2371-2180-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-p2771-0000-500-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-p2771-0000-500-2019.01-5.3.1.aarch64",
"product_id": "u-boot-p2771-0000-500-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-p2771-0000-500-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-p2771-0000-500-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-p2771-0000-500-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-pine64plus-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-pine64plus-2019.01-5.3.1.aarch64",
"product_id": "u-boot-pine64plus-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-pine64plus-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-pine64plus-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-pine64plus-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-pinebook-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-pinebook-2019.01-5.3.1.aarch64",
"product_id": "u-boot-pinebook-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-pinebook-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-pinebook-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-pinebook-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-pineh64-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-pineh64-2019.01-5.3.1.aarch64",
"product_id": "u-boot-pineh64-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-pineh64-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-pineh64-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-pineh64-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-poplar-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-poplar-2019.01-5.3.1.aarch64",
"product_id": "u-boot-poplar-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-poplar-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-poplar-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-poplar-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-rock960-rk3399-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-rock960-rk3399-2019.01-5.3.1.aarch64",
"product_id": "u-boot-rock960-rk3399-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-rock960-rk3399-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-rock960-rk3399-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-rock960-rk3399-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-rpi3-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-rpi3-2019.01-5.3.1.aarch64",
"product_id": "u-boot-rpi3-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-rpi3-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-rpi3-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-rpi3-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-tools-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-tools-2019.01-5.3.1.aarch64",
"product_id": "u-boot-tools-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-xilinxzynqmpgeneric-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-xilinxzynqmpgeneric-2019.01-5.3.1.aarch64",
"product_id": "u-boot-xilinxzynqmpgeneric-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-xilinxzynqmpgeneric-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-xilinxzynqmpgeneric-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-xilinxzynqmpgeneric-doc-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-xilinxzynqmpzcu102rev10-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-xilinxzynqmpzcu102rev10-2019.01-5.3.1.aarch64",
"product_id": "u-boot-xilinxzynqmpzcu102rev10-2019.01-5.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "u-boot-xilinxzynqmpzcu102rev10-doc-2019.01-5.3.1.aarch64",
"product": {
"name": "u-boot-xilinxzynqmpzcu102rev10-doc-2019.01-5.3.1.aarch64",
"product_id": "u-boot-xilinxzynqmpzcu102rev10-doc-2019.01-5.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "u-boot-tools-2019.01-5.3.1.i586",
"product": {
"name": "u-boot-tools-2019.01-5.3.1.i586",
"product_id": "u-boot-tools-2019.01-5.3.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "u-boot-tools-2019.01-5.3.1.ppc64le",
"product": {
"name": "u-boot-tools-2019.01-5.3.1.ppc64le",
"product_id": "u-boot-tools-2019.01-5.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "u-boot-tools-2019.01-5.3.1.s390x",
"product": {
"name": "u-boot-tools-2019.01-5.3.1.s390x",
"product_id": "u-boot-tools-2019.01-5.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "u-boot-tools-2019.01-5.3.1.x86_64",
"product": {
"name": "u-boot-tools-2019.01-5.3.1.x86_64",
"product_id": "u-boot-tools-2019.01-5.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "u-boot-rpi3-2019.01-5.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64"
},
"product_reference": "u-boot-rpi3-2019.01-5.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "u-boot-tools-2019.01-5.3.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
},
"product_reference": "u-boot-tools-2019.01-5.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "u-boot-rpi3-2019.01-5.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64"
},
"product_reference": "u-boot-rpi3-2019.01-5.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "u-boot-tools-2019.01-5.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
},
"product_reference": "u-boot-tools-2019.01-5.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-11059",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11059"
}
],
"notes": [
{
"category": "general",
"text": "Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11059",
"url": "https://www.suse.com/security/cve/CVE-2019-11059"
},
{
"category": "external",
"summary": "SUSE Bug 1134853 for CVE-2019-11059",
"url": "https://bugzilla.suse.com/1134853"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "low"
}
],
"title": "CVE-2019-11059"
},
{
"cve": "CVE-2019-11690",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-11690"
}
],
"notes": [
{
"category": "general",
"text": "gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-11690",
"url": "https://www.suse.com/security/cve/CVE-2019-11690"
},
{
"category": "external",
"summary": "SUSE Bug 1134157 for CVE-2019-11690",
"url": "https://bugzilla.suse.com/1134157"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "low"
}
],
"title": "CVE-2019-11690"
},
{
"cve": "CVE-2019-13103",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-13103"
}
],
"notes": [
{
"category": "general",
"text": "A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-13103",
"url": "https://www.suse.com/security/cve/CVE-2019-13103"
},
{
"category": "external",
"summary": "SUSE Bug 1143463 for CVE-2019-13103",
"url": "https://bugzilla.suse.com/1143463"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-13103"
},
{
"cve": "CVE-2019-14192",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14192"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14192",
"url": "https://www.suse.com/security/cve/CVE-2019-14192"
},
{
"category": "external",
"summary": "SUSE Bug 1143777 for CVE-2019-14192",
"url": "https://bugzilla.suse.com/1143777"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14192"
},
{
"cve": "CVE-2019-14193",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14193"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the \"if\" block after calculating the new path length.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14193",
"url": "https://www.suse.com/security/cve/CVE-2019-14193"
},
{
"category": "external",
"summary": "SUSE Bug 1143817 for CVE-2019-14193",
"url": "https://bugzilla.suse.com/1143817"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14193"
},
{
"cve": "CVE-2019-14194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14194"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14194",
"url": "https://www.suse.com/security/cve/CVE-2019-14194"
},
{
"category": "external",
"summary": "SUSE Bug 1143818 for CVE-2019-14194",
"url": "https://bugzilla.suse.com/1143818"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14194"
},
{
"cve": "CVE-2019-14195",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14195"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the \"else\" block after calculating the new path length.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14195",
"url": "https://www.suse.com/security/cve/CVE-2019-14195"
},
{
"category": "external",
"summary": "SUSE Bug 1143819 for CVE-2019-14195",
"url": "https://bugzilla.suse.com/1143819"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14195"
},
{
"cve": "CVE-2019-14196",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14196"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14196",
"url": "https://www.suse.com/security/cve/CVE-2019-14196"
},
{
"category": "external",
"summary": "SUSE Bug 1143820 for CVE-2019-14196",
"url": "https://bugzilla.suse.com/1143820"
},
{
"category": "external",
"summary": "SUSE Bug 1199623 for CVE-2019-14196",
"url": "https://bugzilla.suse.com/1199623"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14196"
},
{
"cve": "CVE-2019-14197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14197"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14197",
"url": "https://www.suse.com/security/cve/CVE-2019-14197"
},
{
"category": "external",
"summary": "SUSE Bug 1143821 for CVE-2019-14197",
"url": "https://bugzilla.suse.com/1143821"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14197"
},
{
"cve": "CVE-2019-14198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14198"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14198",
"url": "https://www.suse.com/security/cve/CVE-2019-14198"
},
{
"category": "external",
"summary": "SUSE Bug 1143823 for CVE-2019-14198",
"url": "https://bugzilla.suse.com/1143823"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14198"
},
{
"cve": "CVE-2019-14199",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14199"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14199",
"url": "https://www.suse.com/security/cve/CVE-2019-14199"
},
{
"category": "external",
"summary": "SUSE Bug 1143824 for CVE-2019-14199",
"url": "https://bugzilla.suse.com/1143824"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14199"
},
{
"cve": "CVE-2019-14200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14200"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14200",
"url": "https://www.suse.com/security/cve/CVE-2019-14200"
},
{
"category": "external",
"summary": "SUSE Bug 1143825 for CVE-2019-14200",
"url": "https://bugzilla.suse.com/1143825"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14200"
},
{
"cve": "CVE-2019-14201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14201"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14201",
"url": "https://www.suse.com/security/cve/CVE-2019-14201"
},
{
"category": "external",
"summary": "SUSE Bug 1143827 for CVE-2019-14201",
"url": "https://bugzilla.suse.com/1143827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14201"
},
{
"cve": "CVE-2019-14202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14202"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14202",
"url": "https://www.suse.com/security/cve/CVE-2019-14202"
},
{
"category": "external",
"summary": "SUSE Bug 1143828 for CVE-2019-14202",
"url": "https://bugzilla.suse.com/1143828"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14202"
},
{
"cve": "CVE-2019-14203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14203"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14203",
"url": "https://www.suse.com/security/cve/CVE-2019-14203"
},
{
"category": "external",
"summary": "SUSE Bug 1143830 for CVE-2019-14203",
"url": "https://bugzilla.suse.com/1143830"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14203"
},
{
"cve": "CVE-2019-14204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2019-14204"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2019-14204",
"url": "https://www.suse.com/security/cve/CVE-2019-14204"
},
{
"category": "external",
"summary": "SUSE Bug 1143831 for CVE-2019-14204",
"url": "https://bugzilla.suse.com/1143831"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2019-14204"
},
{
"cve": "CVE-2020-10648",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-10648"
}
],
"notes": [
{
"category": "general",
"text": "Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-10648",
"url": "https://www.suse.com/security/cve/CVE-2020-10648"
},
{
"category": "external",
"summary": "SUSE Bug 1167209 for CVE-2020-10648",
"url": "https://bugzilla.suse.com/1167209"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "moderate"
}
],
"title": "CVE-2020-10648"
},
{
"cve": "CVE-2020-8432",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2020-8432"
}
],
"notes": [
{
"category": "general",
"text": "In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified by static analysis.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2020-8432",
"url": "https://www.suse.com/security/cve/CVE-2020-8432"
},
{
"category": "external",
"summary": "SUSE Bug 1162198 for CVE-2020-8432",
"url": "https://bugzilla.suse.com/1162198"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-rpi3-2019.01-5.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:u-boot-tools-2019.01-5.3.1.aarch64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2020-11-09T10:09:12Z",
"details": "important"
}
],
"title": "CVE-2020-8432"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…