critical9.8
CVE-2018-18439
DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled.
Impact
DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a crafted kernel image.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Denx | U-Boot | before 2018.09 Version 2018.09 |