CVE-2018-3968

An exploitable vulnerability exists in the verified boot protection of the Das U-Boot from version 2013.07-rc1 to 2014.07-rc2. The affected versions lack proper FIT signature enforcement, which allows an attacker to bypass U-Boot's verified boot and execute an unsigned kernel, embedded in a legacy image format. To trigger this vulnerability, a local attacker needs to be able to supply the image to boot.

• CWE-347

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0633Exploit, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0633Exploit, Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3962A use-after-free vulnerability exists in the JavaScript engi…7.3
• CVE-2018-3963An exploitable command injection vulnerability exists in the…8
• CVE-2018-3964An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3965An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3966An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3967An exploitable use-after-free vulnerability exists in the Ja…7.8
• CVE-2018-3969An exploitable vulnerability exists in the verified boot pro…7.8
• CVE-2018-3970An exploitable memory disclosure vulnerability exists in the…5.5
• CVE-2018-3971An exploitable arbitrary write vulnerability exists in the 0…7.8
• CVE-2018-3972An exploitable code execution vulnerability exists in the Le…9.8
• CVE-2018-3973An exploitable out of bounds write exists in the CAL parsing…7.8
• CVE-2018-3974An exploitable local privilege elevation vulnerability exist…7.8