CVE-2026-34962

概要

参考情報

• barebox/barebox · Product
• barebox/barebox release v2026.04.0 · Release Notes
• vulncheck.com/advisories/barebox-ext4-directory-parsing-infinite-loop-denial-of-service · Third Party Advisory
• y637f9qq2x.com/posts/barebox-sandbox-vulns

barebox のその他の脆弱性

• CVE-2026-34963高 7.8barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer ove…
• CVE-2026-34961高 7.7barebox prior to version 2026.04.0 contains out-of-bounds read vulnerabilities in ext4 extent parsing due to missing validation of the eh_en…
• CVE-2026-34960中 6.5barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option parsing within the dhcp_message_type() functi…
• CVE-2026-33243高 8.2barebox is a bootloader. In barebox from version 2016.03.0 to before version 2026.03.1 (and the corresponding backport to 2025.09.3), an att…
• CVE-2021-37848高 7.5common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash comparison.