CVE-2019-14198

Summary

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://gitlab.com/u-boot/u-boot
• https://blog.semmle.com/uboot-rce-nfs-vulnerability/

Additional References

• https://cert-portal.siemens.com/productcert/html/ssa-577017.html

References

• https://gitlab.com/u-boot/u-boot
• https://blog.semmle.com/uboot-rce-nfs-vulnerability/

• ←Previous
• Next→