CVE-2017-3225 Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector that may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data
MediumCVSS 4.6
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot's use of a zero initialization vector may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data. Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector. This allows an attacker to perform dictionary attacks on encrypted data produced by Das U-Boot to learn information about the encrypted data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/u-boot(Debian:12) | All versions | No fix listed |
| debian/u-boot(Debian:12) | = 2023.01+dfsg-2 | No fix listed |
| debian/u-boot(Debian:12) | = 2023.01+dfsg-2+deb12u1 | No fix listed |
| debian/u-boot(Debian:12) | = 2023.01+dfsg-2+deb12u2 | No fix listed |
| debian/u-boot(Debian:12) | = 2023.01+dfsg-2+deb12u3 | No fix listed |
| debian/u-boot(Debian:12) | = 2023.04+dfsg-1 | No fix listed |
| debian/u-boot(Debian:12) | = 2023.04~rc2+dfsg-1 | No fix listed |
| debian/u-boot(Debian:12) | = 2023.04~rc5+dfsg-1 | No fix listed |
| debian/u-boot(Debian:12) | = 2023.07+dfsg-1 | No fix listed |
| debian/u-boot(Debian:12) | = 2023.07~rc4+dfsg-1 | No fix listed |
| debian/u-boot(Debian:12) | = 2023.07~rc5+dfsg-1 | No fix listed |
| debian/u-boot(Debian:12) | = 2024.01+dfsg-1 | No fix listed |
| debian/u-boot(Debian:12) | = 2024.01+dfsg-2 | No fix listed |
| debian/u-boot(Debian:12) | = 2024.01+dfsg-3 | No fix listed |
| debian/u-boot(Debian:12) | = 2024.01+dfsg-4 | No fix listed |
| debian/u-boot(Debian:12) | = 2024.01+dfsg-5 | No fix listed |
| debian/u-boot(Debian:12) | = 2024.01+dfsg-6 | No fix listed |
| debian/u-boot(Debian:12) | = 2024.01+dfsg-7 | No fix listed |
| debian/u-boot(Debian:12) | = 2024.01~rc6+dfsg-1 | No fix listed |
| debian/u-boot(Debian:12) | = 2024.01~rc6+dfsg-2 | No fix listed |
| debian/u-boot(Debian:12) | = 2025.01-1 | No fix listed |
| debian/u-boot(Debian:12) | = 2025.01-2 | No fix listed |
| debian/u-boot(Debian:12) | = 2025.01-3 | No fix listed |
| debian/u-boot(Debian:12) | = 2025.01-3.1 | No fix listed |
| debian/u-boot(Debian:12) | = 2025.01-3.2 | No fix listed |
Show 11 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/u-boot(Debian:13) | All versions | No fix listed |
| debian/u-boot(Debian:13) | = 2025.01-3 | No fix listed |
| debian/u-boot(Debian:13) | = 2025.01-3+deb13u1 | No fix listed |
| debian/u-boot(Debian:13) | = 2025.01-3.1 | No fix listed |
| debian/u-boot(Debian:13) | = 2025.01-3.2 | No fix listed |
| debian/u-boot(Debian:14) | All versions | No fix listed |
| debian/u-boot(Debian:14) | = 2025.01-3 | No fix listed |
| debian/u-boot(Debian:14) | = 2025.01-3.1 | No fix listed |
| debian/u-boot(Debian:14) | = 2025.01-3.2 | No fix listed |
| denx U-Boot | < 2017.09 | 2017.09 |
| das U-Boot | >= 2017.09, < 2017.09 | 2017.09 |
References
- Debian Security Tracker CVE-2017-3225 vendor-advisory
- 100675 third-party-advisory vdb-entry
- VU#166743 third-party-advisory us-government-resource