VULNERABILITY INTELLIGENCE

CVE-2024-42040

CVSS score8.1 HIGH
EPSS probability0.60%
CISA KEVNot currently listed
Published2024-08-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Description

Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-120

Primary references