CVE:CVE-2019-13104
CNNVD:CNNVD-201908-425
Das U-Boot是一款主要用于嵌入式系统的开机加载程序。该程序支持PPC、ARM、AVR32、MIPS、x86、68k、Nios与MicroBlaze等多种不同的计算机系统结构。
Das U-Boot 2016.11-rc1版本至2019.07-rc4版本中存在数字错误漏洞。攻击者可借助特制的ext4文件系统利用该漏洞覆盖大量数据（包括整个栈）。
solution:Upgrade denx u-boot to a higher version than 2019.04,2019.07,2019.07:rc1,2019.07:rc2,2019.07:rc3,2019.07:rc4,and avoid the version [2016.09,2019.04],2019.07,2019.07:rc1,2019.07:rc2,2019.07:rc3,2019.07:rc4; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1