Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 构建的自引用 DOS 分区表将导致 2019.07-rc4 之前的所有 Das U-Boot 版本无限递归从而导致堆栈无限增长最终崩溃或覆盖其他数据。 (CVE-2019-13103)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

u-boot用のこの更新プログラムでは、以下の問題が修正されています：

Raspberry Pi 3 B+でのネットワーク起動を修正します（bsc#1098649）

GOPピクセルフォーマットを修正します（bsc#1098447）

Raspberry PiでのSD書き込みを修正します

EFIで起動するために、さらにいくつかのarmv7ボードを有効にします

潜在的にミスコンパイルされるランタイムサービス呼び出しを修正します

CVE-2019-14192（bsc#1143777）、CVE-2019-14193（bsc#1143817）、CVE-2019-14199（bsc#1143824）、CVE-2019-14197（bsc#1143821）、CVE-2019-14200（bsc#1143825）、CVE-2019-14201（bsc#1143827）、CVE-2019-14202（bsc#1143828）、CVE-2019-14203（bsc#1143830）、CVE-2019-14204（bsc#1143831）、CVE-2019-14194（bsc#1143818）、CVE-2019-14198（bsc#1143823）、CVE-2019-14195（bsc#1143819）、CVE-2019-14196（bsc#1143820）、CVE-2019-13103（bsc#1143463）、CVE-2020-8432（bsc#1162198）、CVE-2019-11059（bsc#1134853）、CVE-2019-11690（bsc#1134157）およびCVE-2020-10648（bsc#1167209）を修正します

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 特製的自我參照 DOS 磁碟分割表格會造成 2019.07-rc4 之前的所有 Das U-Boot 版本無限遞回進而造成堆疊無限增長並最終損毀或覆寫其他資料。 (CVE-2019-13103)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

This update for u-boot fixes the following issues :

Fix network boot on Raspberry Pi 3 B+ (bsc#1098649)

Fix GOP pixel format (bsc#1098447)

Fix SD writes on Raspberry Pi

Enable a few more armv7 boards to boot with EFI

Fix potentially miscompiled runtime service calls

Fix CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817), CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821), CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830), CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818), CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819), CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463), CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853), CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image     because filesystem loading is mishandled. (CVE-2018-18440)

  - Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer     overflow. (CVE-2019-11059)

  - gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows     attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is     relied upon for UUID values of a GUID Partition Table of a boot device. (CVE-2019-11690)

  - A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to     infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other     data. (CVE-2019-13103)

  - In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a     very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.
    (CVE-2019-13104)

  - Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4     filesystem, which results in a stack buffer overflow and likely code execution. (CVE-2019-13106)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP     packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
    (CVE-2019-14192)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated     length at nfs_readlink_reply, in the 'if' block after calculating the new path length. (CVE-2019-14193)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_read_reply when calling store_block in the NFSv2 case. (CVE-2019-14194)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated     length at nfs_readlink_reply in the 'else' block after calculating the new path length. (CVE-2019-14195)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_lookup_reply. (CVE-2019-14196)

  - An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at     nfs_read_reply. (CVE-2019-14197)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_read_reply when calling store_block in the NFSv3 case. (CVE-2019-14198)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP     packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
    (CVE-2019-14199)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: rpc_lookup_reply. (CVE-2019-14200)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_lookup_reply. (CVE-2019-14201)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_readlink_reply. (CVE-2019-14202)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_mount_reply. (CVE-2019-14203)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_umountall_reply. (CVE-2019-14204)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 細工された自己参照DOSパーティションテーブルにより、2019.07-rc4までのすべてのDas U-Bootバージョンが無限再帰するため、スタックが無限に拡大し、最終的にクラッシュするか、他のデータを上書きします。CVE-2019-13103

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

u-boot用のこの更新プログラムでは、以下の問題が修正されています：

CVE-2019-14192（bsc#1143777）、CVE-2019-14193（bsc#1143817）、CVE-2019-14199（bsc#1143824）、CVE-2019-14197（bsc#1143821）、CVE-2019-14200（bsc#1143825）、CVE-2019-14201（bsc#1143827）、CVE-2019-14202（bsc#1143828）、CVE-2019-14203（bsc#1143830）、CVE-2019-14204（bsc#1143831）、CVE-2019-14194（bsc#1143818）、CVE-2019-14198（bsc#1143823）、CVE-2019-14195（bsc#1143819）、CVE-2019-14196（bsc#1143820）、CVE-2019-13103（bsc#1143463）、CVE-2020-8432（bsc#1162198）、CVE-2019-11059（bsc#1134853）、CVE-2019-11690（bsc#1134157）およびCVE-2020-10648（bsc#1167209）

この更新はSUSEからインポートされました：SLE-15-SP1: 更新プロジェクトを更新します。

u-boot用のこの更新プログラムでは、以下の問題が修正されています：

CVE-2019-14192（bsc#1143777）、CVE-2019-14193（bsc#1143817）、CVE-2019-14199（bsc#1143824）、CVE-2019-14197（bsc#1143821）、CVE-2019-14200（bsc#1143825）、CVE-2019-14201（bsc#1143827）、CVE-2019-14202（bsc#1143828）、CVE-2019-14203（bsc#1143830）、CVE-2019-14204（bsc#1143831）、CVE-2019-14194（bsc#1143818）、CVE-2019-14198（bsc#1143823）、CVE-2019-14195（bsc#1143819）、CVE-2019-14196（bsc#1143820）、CVE-2019-13103（bsc#1143463）、CVE-2020-8432（bsc#1162198）、CVE-2019-11059（bsc#1134853）、CVE-2019-11690（bsc#1134157）およびCVE-2020-10648（bsc#1167209）

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、そこに新しい問題を追加することはせずに、できる限り自動的に整理と書式設定をするようにしています。

According to the versions of the uboot-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image     because filesystem loading is mishandled. (CVE-2018-18440)

  - Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer     overflow. (CVE-2019-11059)

  - gen_rand_uuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows     attackers to determine UUID values in scenarios where CONFIG_RANDOM_UUID is enabled, and Das U-Boot is     relied upon for UUID values of a GUID Partition Table of a boot device. (CVE-2019-11690)

  - A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to     infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other     data. (CVE-2019-13103)

  - In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a     very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.
    (CVE-2019-13104)

  - Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4     filesystem, which results in a stack buffer overflow and likely code execution. (CVE-2019-13106)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP     packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
    (CVE-2019-14192)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated     length at nfs_readlink_reply, in the 'if' block after calculating the new path length. (CVE-2019-14193)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_read_reply when calling store_block in the NFSv2 case. (CVE-2019-14194)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated     length at nfs_readlink_reply in the 'else' block after calculating the new path length. (CVE-2019-14195)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_lookup_reply. (CVE-2019-14196)

  - An issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at     nfs_read_reply. (CVE-2019-14197)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length     check at nfs_read_reply when calling store_block in the NFSv3 case. (CVE-2019-14198)

  - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP     packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.
    (CVE-2019-14199)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: rpc_lookup_reply. (CVE-2019-14200)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_lookup_reply. (CVE-2019-14201)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_readlink_reply. (CVE-2019-14202)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_mount_reply. (CVE-2019-14203)

  - An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this     nfs_handler reply helper function: nfs_umountall_reply. (CVE-2019-14204)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to     infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other     data. (CVE-2019-13103)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for u-boot fixes the following issues :

CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817), CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821), CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830), CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818), CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819), CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463), CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853), CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for u-boot fixes the following issues :

CVE-2019-14192 (bsc#1143777), CVE-2019-14193 (bsc#1143817), CVE-2019-14199 (bsc#1143824), CVE-2019-14197 (bsc#1143821), CVE-2019-14200 (bsc#1143825), CVE-2019-14201 (bsc#1143827), CVE-2019-14202 (bsc#1143828), CVE-2019-14203 (bsc#1143830), CVE-2019-14204 (bsc#1143831), CVE-2019-14194 (bsc#1143818), CVE-2019-14198 (bsc#1143823), CVE-2019-14195 (bsc#1143819), CVE-2019-14196 (bsc#1143820), CVE-2019-13103 (bsc#1143463), CVE-2020-8432 (bsc#1162198), CVE-2019-11059 (bsc#1134853), CVE-2019-11690 (bsc#1134157) and CVE-2020-10648 (bsc#1167209)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
255553	Linux Distros 未修补的漏洞：CVE-2019-13103	Nessus	Misc.	8/26/2025	8/26/2025	high
143885	SUSE SLES15セキュリティ更新プログラム：u-boot（SUSE-SU-2020:3283-1）	Nessus	SuSE Local Security Checks	12/9/2020	2/5/2024	critical
255553	Linux Distros 未修補的弱點：CVE-2019-13103	Nessus	Misc.	8/26/2025	8/26/2025	high
143885	SUSE SLES15 Security Update : u-boot (SUSE-SU-2020:3283-1)	Nessus	SuSE Local Security Checks	12/9/2020	2/5/2024	critical
158545	EulerOS 2.0 SP9 : uboot-tools (EulerOS-SA-2022-1312)	Nessus	Huawei Local Security Checks	3/2/2022	11/6/2023	critical
255553	Linux Distros のパッチ未適用の脆弱性: CVE-2019-13103	Nessus	Misc.	8/26/2025	8/26/2025	high
142922	openSUSEセキュリティ更新プログラム：u-boot（openSUSE-2020-1930）	Nessus	SuSE Local Security Checks	11/17/2020	2/8/2024	critical
143727	SUSE SLED15 / SLES15セキュリティ更新プログラム：u-boot（SUSE-SU-2020:3282-1）	Nessus	SuSE Local Security Checks	12/9/2020	2/5/2024	critical
158523	EulerOS 2.0 SP9 : uboot-tools (EulerOS-SA-2022-1296)	Nessus	Huawei Local Security Checks	3/2/2022	11/7/2023	critical
255553	Linux Distros Unpatched Vulnerability : CVE-2019-13103	Nessus	Misc.	8/26/2025	8/26/2025	high
142922	openSUSE Security Update : u-boot (openSUSE-2020-1930)	Nessus	SuSE Local Security Checks	11/17/2020	2/8/2024	critical
143727	SUSE SLED15 / SLES15 Security Update : u-boot (SUSE-SU-2020:3282-1)	Nessus	SuSE Local Security Checks	12/9/2020	2/5/2024	critical

Detections

Analytics

Plugins Search

high

critical

high

critical

critical

high

critical

critical

critical

high

critical

critical