The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT. (CVE-2021-27097)

  - The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.
    (CVE-2021-27138)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the uboot-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT. (CVE-2021-27097)

  - The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.
    (CVE-2021-27138)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the uboot-tools packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The boot loader in Das U-Boot before 2021.04-rc2     mishandles a modified FIT.(CVE-2021-27097)

  - The boot loader in Das U-Boot before 2021.04-rc2     mishandles use of unit addresses in a     FIT.(CVE-2021-27138)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the uboot-tools package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The boot loader in Das U-Boot before 2021.04-rc2     mishandles a modified FIT.(CVE-2021-27097)

  - The boot loader in Das U-Boot before 2021.04-rc2     mishandles use of unit addresses in a     FIT.(CVE-2021-27138)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
159988	EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2022-1498)	Nessus	Huawei Local Security Checks	high
159971	EulerOS 2.0 SP10 : uboot-tools (EulerOS-SA-2022-1517)	Nessus	Huawei Local Security Checks	high
152323	EulerOS 2.0 SP9 : uboot-tools (EulerOS-SA-2021-2284)	Nessus	Huawei Local Security Checks	high
152316	EulerOS 2.0 SP9 : uboot-tools (EulerOS-SA-2021-2258)	Nessus	Huawei Local Security Checks	high

Detections

Analytics

CVE-2021-27138

high

Tenable Plugins

high

high

high

high