PT-2024-18181 · Bl2 · Bl2

[e-mail] · Published 2024-02-19 · Updated 2025-01-24 · CVE-2024-1633

Positive Technologies (AI Summary)

CVSS v3.1

2.0

Low

Base vector

AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Bootloader versions c2f286820471ed276c57e603762bd831873e5a17 and later

Description The issue occurs during the secure boot process, where the second stage of the bootloader, bl2, loops over images defined in the table "bl2 mem params descs". For each image, bl2 reads the image length and destination from the image's certificate, which is based on a 32-bit unsigned integer value. This can result in an integer overflow, allowing an attacker to bypass memory range restrictions and write data out of buffer bounds, potentially bypassing secure boot.

Recommendations For versions c2f286820471ed276c57e603762bd831873e5a17 and later, consider disabling the bl2 function until a patch is available to prevent potential exploitation. Restrict access to the "bl2 mem params descs" table to minimize the risk of exploitation. Avoid using the image length and destination variables in the affected certificate reading process until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2024-1633

Affected Products

Bl2

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-1633 · Security Note
• https://osv.dev/vulnerability/CVE-2024-1633 · Vendor Advisory
• https://twitter.com/CVEnew/status/1759621957014712704 · Twitter Post
• https://asrg.io/security-advisories/CVE-2024-1633 · Note
• https://t.me/cvenotify/71910 · Telegram Post
• https://t.me/cvenotify/108485 · Telegram Post