Vulnerability   
Search   
    Search 211766 CVE descriptions
and 97459 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2020-8432
Description:In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified by static analysis.
Test IDs: 1.3.6.1.4.1.25623.1.0.853568   1.3.6.1.4.1.25623.1.1.4.2020.3283.1   1.3.6.1.4.1.25623.1.1.4.2020.3255.1   1.3.6.1.4.1.25623.1.1.4.2020.3256.1   1.3.6.1.4.1.25623.1.1.4.2020.3282.1   1.3.6.1.4.1.25623.1.1.4.2020.3161.1  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-8432
https://www.mail-archive.com/u-boot@lists.denx.de/msg354060.html
https://www.mail-archive.com/u-boot@lists.denx.de/msg354114.html
SuSE Security Announcement: openSUSE-SU-2020:1869 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.html




© 1998-2021 E-Soft Inc. All rights reserved.