Refine your search

1 vulnerability found for rauc by rauc

CVE-2026-34155 (GCVE-0-2026-34155)
Vulnerability from cvelistv5
Published
2026-03-31 13:28
Modified
2026-03-31 15:45
Severity ?
7.2 (High) - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:H/VA:N/SC:H/SI:H/SA:H
CWE
  • CWE-196 - Unsigned to Signed Conversion Error
  • CWE-347 - Improper Verification of Cryptographic Signature
Summary
RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a legitimate signature, an attacker can modify the part of the payload which is not covered by the signature. This issue has been patched in version 1.15.2.
References
Impacted products
Vendor Product Version
rauc rauc Version: < 1.15.2
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-34155",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-31T15:44:51.772152Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-31T15:45:04.506Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "rauc",
          "vendor": "rauc",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.15.2"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the \u0027plain\u0027 format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a legitimate signature, an attacker can modify the part of the payload which is not covered by the signature. This issue has been patched in version 1.15.2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:H/VA:N/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-196",
              "description": "CWE-196: Unsigned to Signed Conversion Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347: Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-03-31T13:28:14.863Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/rauc/rauc/security/advisories/GHSA-6hj7-q844-m2hx",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/rauc/rauc/security/advisories/GHSA-6hj7-q844-m2hx"
        },
        {
          "name": "https://github.com/rauc/rauc/commit/4fb7c798d6ae412344fb8f8d310d773046af3441",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/rauc/rauc/commit/4fb7c798d6ae412344fb8f8d310d773046af3441"
        },
        {
          "name": "https://github.com/rauc/rauc/releases/tag/v1.15.2",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/rauc/rauc/releases/tag/v1.15.2"
        }
      ],
      "source": {
        "advisory": "GHSA-6hj7-q844-m2hx",
        "discovery": "UNKNOWN"
      },
      "title": "RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-34155",
    "datePublished": "2026-03-31T13:28:14.863Z",
    "dateReserved": "2026-03-25T20:12:04.196Z",
    "dateUpdated": "2026-03-31T15:45:04.506Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}