U-root

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

U-root records in CISA KEV

No U-root vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in U-root · all components

TI-2020-06189 CVE-2020-7669 · GHSA-75qf-wgfj-v652

LOW 36

This affects all versions of package github.com/u-root/u-root/pkg/tarutil.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0183 Published 2020-09-01 Fixed in 0.9.0 CWE-22

TI-2020-06186 CVE-2020-7666 · GHSA-mq35-x99r-54fc

LOW 36

This affects all versions of package github.com/u-root/u-root/pkg/cpio.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01527 Published 2020-09-01 No fix listed CWE-22

TI-2020-06185 CVE-2020-7665 · GHSA-58pf-pcwv-qg85

LOW 36

This affects all versions of package github.com/u-root/u-root/pkg/uzip.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01826 Published 2020-09-01 Fixed in 0.9.0 CWE-22