CVE-2021-27138

Medium

6.8/10

Summary

The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.

Access Complexity: MEDIUM
AccessVector: NETWORK
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: PARTIAL
Availability Impact: PARTIAL

References

Advisory Timeline

Published Feb 17, 2021