CVE-2019-14195

Summary

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://gitlab.com/u-boot/u-boot
• https://blog.semmle.com/uboot-rce-nfs-vulnerability/

Additional References

• https://cert-portal.siemens.com/productcert/html/ssa-577017.html

References

• https://gitlab.com/u-boot/u-boot
• https://blog.semmle.com/uboot-rce-nfs-vulnerability/

• ←Previous
• Next→