CVE-2020-8432

In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified by static analysis.
Severity
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Atk. Vector
NETWORK
Atk. Complexity
LOW
Priv. Required
NONE
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
denxu-boot
𝑥
≤ 2020.01
opensuseleap
15.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
u-boot
bullseye
2021.01+dfsg-5
fixed
buster
ignored
stretch
no-dsa
jessie
ignored
bookworm
2023.01+dfsg-2+deb12u1
fixed
sid
2024.01+dfsg-5
fixed
trixie
2024.01+dfsg-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
u-boot
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
Fixed 2021.01+dfsg-3ubuntu0~20.04.3
released
eoan
ignored
bionic
Fixed 2020.10+dfsg-1ubuntu0~18.04.2
released
xenial
not-affected
trusty
dne
Common Weakness Enumeration
References
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00030.html
https://www.mail-archive.com/u-boot%40lists.denx.de/msg354060.html
https://www.mail-archive.com/u-boot%40lists.denx.de/msg354114.html