According to the versions of the uboot-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image     because filesystem loading is mishandled. (CVE-2018-18440)

  - Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer     overflow. (CVE-2019-11059)

  - gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows     attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is     relied upon for UUID values of a GUID Partition Table of a boot device. (CVE-2019-11690)

  - A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to     infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other     data. (CVE-2019-13103)

  - In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a     very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.
    (CVE-2019-13104)

  - Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4     filesystem, which results in a stack buffer overflow and likely code execution. (CVE-2019-13106)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP     packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
    (CVE-2019-14192)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated     length at nfs_readlink_reply, in the 'if' block after calculating the new path length. (CVE-2019-14193)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_read_reply when calling store_block in the NFSv2 case. (CVE-2019-14194)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated     length at nfs_readlink_reply in the 'else' block after calculating the new path length. (CVE-2019-14195)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_lookup_reply. (CVE-2019-14196)

  - An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at     nfs_read_reply. (CVE-2019-14197)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_read_reply when calling store_block in the NFSv3 case. (CVE-2019-14198)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP     packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
    (CVE-2019-14199)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: rpc_lookup_reply. (CVE-2019-14200)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_lookup_reply. (CVE-2019-14201)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_readlink_reply. (CVE-2019-14202)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_mount_reply. (CVE-2019-14203)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_umountall_reply. (CVE-2019-14204)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 2019.07までの Das U-Boot で問題が見つかりました。nfs_lookup_reply で長さチェックに失敗した、無制限の memcpy があります。CVE-2019-14196

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 2019.07之前的 Das U-Boot 中發現一個問題。在 nfs_lookup_reply 存在一個因長度檢查失敗而無限制的 memcpy。 (CVE-2019-14196)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

u-boot用のこの更新プログラムでは、以下の問題が修正されています：

Raspberry Pi 3 B+でのネットワーク起動を修正します（bsc#1098649）

GOPピクセルフォーマットを修正します（bsc#1098447）

Raspberry PiでのSD書き込みを修正します

EFIで起動するために、さらにいくつかのarmv7ボードを有効にします

潜在的にミスコンパイルされるランタイムサービス呼び出しを修正します

CVE-2019-14192（bsc#1143777）、CVE-2019-14193（bsc#1143817）、CVE-2019-14199（bsc#1143824）、CVE-2019-14197（bsc#1143821）、CVE-2019-14200（bsc#1143825）、CVE-2019-14201（bsc#1143827）、CVE-2019-14202（bsc#1143828）、CVE-2019-14203（bsc#1143830）、CVE-2019-14204（bsc#1143831）、CVE-2019-14194（bsc#1143818）、CVE-2019-14198（bsc#1143823）、CVE-2019-14195（bsc#1143819）、CVE-2019-14196（bsc#1143820）、CVE-2019-13103（bsc#1143463）、CVE-2020-8432（bsc#1162198）、CVE-2019-11059（bsc#1134853）、CVE-2019-11690（bsc#1134157）およびCVE-2020-10648（bsc#1167209）を修正します

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Das U-Boot 之前版本中发现一个问题 2019.07。存在不受限制的 memcpy其中 nfs_lookup_reply 的长度检查失败。 (CVE-2019-14196)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

This update for u-boot fixes the following issues :

Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)

Fix GOP pixel format (bsc#1098447)

Fix SD writes on Raspberry Pi

Enable a few more armv7 boards to boot with EFI

Fix potentially miscompiled runtime service calls

Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817), CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821), CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830), CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818), CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819), CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463), CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853), CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image     because filesystem loading is mishandled. (CVE-2018-18440)

  - Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer     overflow. (CVE-2019-11059)

  - gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows     attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is     relied upon for UUID values of a GUID Partition Table of a boot device. (CVE-2019-11690)

  - A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to     infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other     data. (CVE-2019-13103)

  - In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a     very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.
    (CVE-2019-13104)

  - Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4     filesystem, which results in a stack buffer overflow and likely code execution. (CVE-2019-13106)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP     packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
    (CVE-2019-14192)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated     length at nfs_readlink_reply, in the 'if' block after calculating the new path length. (CVE-2019-14193)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_read_reply when calling store_block in the NFSv2 case. (CVE-2019-14194)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated     length at nfs_readlink_reply in the 'else' block after calculating the new path length. (CVE-2019-14195)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_lookup_reply. (CVE-2019-14196)

  - An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at     nfs_read_reply. (CVE-2019-14197)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_read_reply when calling store_block in the NFSv3 case. (CVE-2019-14198)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP     packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
    (CVE-2019-14199)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: rpc_lookup_reply. (CVE-2019-14200)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_lookup_reply. (CVE-2019-14201)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_readlink_reply. (CVE-2019-14202)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_mount_reply. (CVE-2019-14203)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_umountall_reply. (CVE-2019-14204)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

远程 Debian 11 主机上存在安装的程序包该程序包受到 dla-4150 公告中提及的多个漏洞的影响。

    -------------------------------------------------- ----------------------- Debian LTS 公告 DLA-4150-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Daniel Leidert 2025 年 5 月 1 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------

    程序包u-boot 版本 2021.01+dfsg-5+deb11u1 CVE ID CVE-2019-14196 CVE-2022-2347 CVE-2022-30552 CVE-2022-30767 CVE-2022-30790 CVE-2022-33103 CVE-2022-33967 CVE-2022-34835 CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257 CVE-2024-57258 CVE-2024-57259 Debian 缺陷1014470 1014471 1014528 1014529 1014959 1098254


    在嵌入式系统 u-boot 的引导加载程序中发现多个漏洞。

    CVE-2022-2347

       未检查长度字段可导致堆溢出。

    CVE-2022-30552 和 CVE-2022-30790

       缓冲区溢出。

    CVE-2022-30767 (CVE-2019-14196)

       长度检查失败的 memcpy 无限循环导致缓冲区溢出。存在此问题的原因是对 CVE-2019-14196的修复不正确。

    CVE-2022-33103

       越界写入。

    CVE-2022-33967

       基于堆的缓冲区溢出漏洞可导致拒绝服务 (DoS)。

    CVE-2022-34835

       整数符号错误和由此产生的基于堆栈的缓冲区溢出。

    CVE-2024-57254

       整数溢出。

    CVE-2024-57255

       整数溢出。

    CVE-2024-57256

       整数溢出。

    CVE-2024-57257

       堆栈消耗问题。

    CVE-2024-57258

       多个整数溢出。

    CVE-2024-57259

       导致堆内存损坏的差一错误。


    对于 Debian 11 bullseye，已在 2021.01+dfsg-5+deb11u1 版本中修复这些问题。

    建议您升级 u-boot 程序包。

    有关 u-boot 的详细安全状态请参阅其安全跟踪页面网址是
    https://security-tracker.debian.org/tracker/u-boot

    有关 Debian LTS 安全公告、如何将这些更新应用到系统以及常见问题解答的更多信息，请访问以下网址：https://wiki.debian.org/LTSAttachment:signature.ascDescription: 此消息部分已经过数字签署

Tenable 已直接从 Debian 安全公告中提取上述描述块。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

An update of the u package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_lookup_reply. (CVE-2019-14196)

Note that Nessus relies on the presence of the package as reported by the vendor.

遠端 Debian 11 主機已安裝受到多個弱點影響的套件如 dla-4150 公告中所提及。

    -------------------------------------------------- ----------------------- Debian LTS 公告 DLA-4150-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Daniel Leidert 2025 年 5 月 1 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------

    套件 u-boot 版本 2021.01+dfsg-5+deb11u1 CVE ID CVE-2019-14196 CVE-2022-2347 CVE-2022-30552 CVE-2022-30767 CVE-2022-30790 CVE-2022-33103 CVE-2022-33967 CVE-2022-34835 CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257 CVE-2024-57258 CVE-2024-57259 Debian 錯誤 1014470 1014471 1014528 1014529 1014959 1098254


    在 u-boot (適用於內嵌系統的開機載入器) 中發現多個弱點。

    CVE-2022-2347

       導致堆積溢位的未檢查長度欄位。

    CVE-2022-30552 和 CVE-2022-30790

       緩衝區溢位。

    CVE-2022-30767 (CVE-2019-14196)

       長度檢查失敗的無限制 memcpy進而導致緩衝區溢位。此問題之所以存在是因為未正確修正 CVE-2019-14196。

    CVE-2022-33103

       超出邊界寫入。

    CVE-2022-33967

       可能導致拒絕服務 (DoS) 的堆積型緩衝區溢位弱點。

    CVE-2022-34835

       整數正負號錯誤及由此產生的堆疊型緩衝區溢位。

    CVE-2024-57254

       整數溢位。

    CVE-2024-57255

       整數溢位。

    CVE-2024-57256

       整數溢位。

    CVE-2024-57257

       堆疊消耗問題。

    CVE-2024-57258

       多個整數溢位。

    CVE-2024-57259

       差一錯誤導致堆積記憶體損毀。


    針對 Debian 11 bullseye，已在 2021.01+dfsg-5+deb11u1 版本中修正這些問題。

    建議您升級 u-boot 套件。

    如需 u-boot 的詳細安全性狀態請參閱其安全追踪頁面
    https://security-tracker.debian.org/tracker/u-boot

    有關 Debian LTS 安全公告、如何將這些更新套用至您的系統以及常見問題的詳細資訊，請參閱：https://wiki.debian.org/LTSAttachment:signature.ascDescription: 這是數位簽署的訊息部分

Tenable 已直接從 Debian 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

u-boot用のこの更新プログラムでは、以下の問題が修正されています：

CVE-2019-14192（bsc#1143777）、CVE-2019-14193（bsc#1143817）、CVE-2019-14199（bsc#1143824）、CVE-2019-14197（bsc#1143821）、CVE-2019-14200（bsc#1143825）、CVE-2019-14201（bsc#1143827）、CVE-2019-14202（bsc#1143828）、CVE-2019-14203（bsc#1143830）、CVE-2019-14204（bsc#1143831）、CVE-2019-14194（bsc#1143818）、CVE-2019-14198（bsc#1143823）、CVE-2019-14195（bsc#1143819）、CVE-2019-14196（bsc#1143820）、CVE-2019-13103（bsc#1143463）、CVE-2020-8432（bsc#1162198）、CVE-2019-11059（bsc#1134853）、CVE-2019-11690（bsc#1134157）およびCVE-2020-10648（bsc#1167209）

この更新はSUSEからインポートされました：SLE-15-SP1: 更新プロジェクトを更新します。

u-boot用のこの更新プログラムでは、以下の問題が修正されています：

CVE-2019-14192（bsc#1143777）、CVE-2019-14193（bsc#1143817）、CVE-2019-14199（bsc#1143824）、CVE-2019-14197（bsc#1143821）、CVE-2019-14200（bsc#1143825）、CVE-2019-14201（bsc#1143827）、CVE-2019-14202（bsc#1143828）、CVE-2019-14203（bsc#1143830）、CVE-2019-14204（bsc#1143831）、CVE-2019-14194（bsc#1143818）、CVE-2019-14198（bsc#1143823）、CVE-2019-14195（bsc#1143819）、CVE-2019-14196（bsc#1143820）、CVE-2019-13103（bsc#1143463）、CVE-2020-8432（bsc#1162198）、CVE-2019-11059（bsc#1134853）、CVE-2019-11690（bsc#1134157）およびCVE-2020-10648（bsc#1167209）

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

リモートのDebian 11ホストには、dla-4150アドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    -------------------------------------------------- ----------------------- Debian LTS アドバイザリ DLA-4150-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/Daniel Leidert 2025 年 5 月 1 日 https://wiki.debian.org/LTS-------------------------------------------------------------------------

    パッケージ u-boot バージョン 2021.01+dfsg-5+deb11u1 CVE ID CVE-2019-14196 CVE-2022-2347 CVE-2022-30552 CVE-2022-30767 CVE-2022-30790 CVE-2022-33103 CVE-2022-33967 CVE-2022-34835 CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257 CVE-2024-57258 CVE-2024-57259 Debian バグ 1014470 1014471 1014528 1014529 1014959 1098254


    組み込みシステム用のブートローダーである u-boot に複数の脆弱性が発見されました。

    CVE-2022-2347

       長さフィールドの未チェックにより、ヒープオーバーフローが発生していました。

    CVE-2022-30552 および CVE-2022-30790

       バッファオーバーフロー。

    CVE-2022-30767 (CVE-2019-14196)

       失敗した長さチェックで無制限の memcpy がバッファオーバーフローを引き起こしました。この問題は CVE-2019-14196の修正が不適切であるため存在します。

    CVE-2022-33103

       領域外書き込み。

    CVE-2022-33967

       サービス拒否DoSを引き起こす可能性があるヒープベースのバッファオーバーフローの脆弱性。

    CVE-2022-34835

       整数符号エラーとその結果生じるスタックベースのバッファオーバーフロー。

    CVE-2024-57254

       整数オーバーフロー。

    CVE-2024-57255

       整数オーバーフロー。

    CVE-2024-57256

       整数オーバーフロー。

    CVE-2024-57257

       スタック消費の問題。

    CVE-2024-57258

       複数の整数オーバーフロー。

    CVE-2024-57259

       ヒープメモリの破損を引き起こす off-by-one エラー。


    Debian 11 bullseye においては、これらの問題はバージョン 2021.01+dfsg-5+deb11u1 で修正されました。

    u-boot パッケージをアップグレードすることを推奨します。

    u-boot の詳細なセキュリティステータスについては、次のセキュリティトラッカーページを参照してください
    https://security-tracker.debian.org/tracker/u-boot

    Debian LTS セキュリティアドバイザリに関する詳細、これらの更新をシステムに適用する方法、およびよくある質問については、こちらを参照してください。https://wiki.debian.org/LTSAttachment:signature.ascDescription: これはデジタル署名されたメッセージ部分です

Tenable は、前述の説明ブロックを Debian セキュリティアドバイザリから直接抽出しました。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4150 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4150-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Daniel Leidert     May 01, 2025                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : u-boot     Version        : 2021.01+dfsg-5+deb11u1     CVE ID         : CVE-2019-14196 CVE-2022-2347 CVE-2022-30552 CVE-2022-30767                      CVE-2022-30790 CVE-2022-33103 CVE-2022-33967 CVE-2022-34835                      CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257                      CVE-2024-57258 CVE-2024-57259     Debian Bug     : 1014470 1014471 1014528 1014529 1014959 1098254


    Multiple vulnerabilties were discovered in u-boot, a boot loader for     embedded systems.

    CVE-2022-2347

       An unchecked length field leading to a heap overflow.

    CVE-2022-30552 and CVE-2022-30790

       Buffer Overflow.

    CVE-2022-30767 (CVE-2019-14196)

       Unbounded memcpy with a failed length check, leading to a buffer        overflow. This issue exists due to an incorrect fix for CVE-2019-        14196.

    CVE-2022-33103

       Out-of-bounds write.

    CVE-2022-33967

       Heap-based buffer overflow vulnerability which may lead to a denial-        of-service (DoS).

    CVE-2022-34835

       Integer signedness error and resultant stack-based buffer overflow.

    CVE-2024-57254

       Integer overflow.

    CVE-2024-57255

       Integer overflow.

    CVE-2024-57256

       Integer overflow.

    CVE-2024-57257

       Stack consumption issue.

    CVE-2024-57258

       Multiple integer overflows.

    CVE-2024-57259

       Off-by-one error resulting in heap memory corruption.


    For Debian 11 bullseye, these problems have been fixed in version     2021.01+dfsg-5+deb11u1.

    We recommend that you upgrade your u-boot packages.

    For the detailed security status of u-boot please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/u-boot

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for u-boot fixes the following issues :

CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817), CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821), CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830), CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818), CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819), CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463), CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853), CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for u-boot fixes the following issues :

CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817), CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821), CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830), CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818), CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819), CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463), CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853), CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
158523	EulerOS 2.0 SP9 : uboot-tools (EulerOS-SA-2022-1296)	Nessus	Huawei Local Security Checks	2022/3/2	2023/11/7	critical
255601	Linux Distros のパッチ未適用の脆弱性: CVE-2019-14196	Nessus	Misc.	2025/8/26	2025/8/26	critical
255601	Linux Distros 未修補的弱點：CVE-2019-14196	Nessus	Misc.	2025/8/26	2025/8/26	critical
143885	SUSE SLES15セキュリティ更新プログラム：u-boot（SUSE-SU-2020:3283-1）	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	critical
255601	Linux Distros 未修补的漏洞：CVE-2019-14196	Nessus	Misc.	2025/8/26	2025/8/26	critical
143885	SUSE SLES15 Security Update : u-boot (SUSE-SU-2020:3283-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	critical
158545	EulerOS 2.0 SP9 : uboot-tools (EulerOS-SA-2022-1312)	Nessus	Huawei Local Security Checks	2022/3/2	2023/11/6	critical
235044	Debian dla-4150u-boot - 安全更新	Nessus	Debian Local Security Checks	2025/5/1	2025/5/7	critical
203082	Photon OS 3.0: U PHSA-2019-3.0-0036	Nessus	PhotonOS Local Security Checks	2024/7/23	2024/7/23	critical
255601	Linux Distros Unpatched Vulnerability : CVE-2019-14196	Nessus	Misc.	2025/8/26	2025/8/26	critical
235044	Debian dla-4150u-boot - 安全性更新	Nessus	Debian Local Security Checks	2025/5/1	2025/5/7	critical
142922	openSUSEセキュリティ更新プログラム：u-boot（openSUSE-2020-1930）	Nessus	SuSE Local Security Checks	2020/11/17	2024/2/8	critical
143727	SUSE SLED15 / SLES15セキュリティ更新プログラム：u-boot（SUSE-SU-2020:3282-1）	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	critical
235044	Debian dla-4150u-boot - セキュリティ更新	Nessus	Debian Local Security Checks	2025/5/1	2025/5/7	critical
235044	Debian dla-4150 : u-boot - security update	Nessus	Debian Local Security Checks	2025/5/1	2025/5/7	critical
142922	openSUSE Security Update : u-boot (openSUSE-2020-1930)	Nessus	SuSE Local Security Checks	2020/11/17	2024/2/8	critical
143727	SUSE SLED15 / SLES15 Security Update : u-boot (SUSE-SU-2020:3282-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical