CVE-2024-57258
HighSummary
Integer overflows in memory allocation in Das U-Boot before version 2025.01-rc1 occur for a crafted squashfs filesystem. These issues can arise during the use of sbrk, request2size, or due to mishandling of ptrdiff_t on x86_64 architecture.
Risk Assessment
Integer overflows can lead to unpredictable system behavior, posing risks to system integrity and availability. An attacker may exploit this vulnerability to execute malicious code or destabilize the system.
Recommendation
It is recommended to update Das U-Boot to version 2025.01-rc1 or later to mitigate this vulnerability. Additionally, access to systems that may be exposed to attacks exploiting this flaw should be monitored and restricted.
Other vulnerabilities in Das U-Boot
See all- CVE-2024-57256High
An integer overflow in ext4fs_read_symlink in Das U-Boot before version 2025.01-rc1 occurs during memory allocation for an ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and memory overwrite.
- CVE-2022-30790High
Das U-Boot version 2022.01 has a Buffer Overflow vulnerability, which is different from the issue described in CVE-2022-30552.
- CVE-2020-10648High
Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.
- CVE-2019-13106High
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.
- CVE-2019-13104High
In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data, including the whole stack, while reading a crafted ext4 filesystem.
- CVE-2019-13103High
A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, leading to uncontrolled stack growth and eventually crashing or overwriting other data.
- CVE-2022-34835Critical
In Das U-Boot through version 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the 'i2c md' command enables the corruption of the return address pointer of the do_i2c_md function.
- CVE-2019-14204Critical
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.
- CVE-2019-14203Critical
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.
- CVE-2019-14202Critical
An issue was discovered in Das U-Boot through 2019.07 related to a stack-based buffer overflow in the nfs_readlink_reply helper function.
Original NVD description (English source)
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.