CVE-2019-14199

Summary

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://gitlab.com/u-boot/u-boot
• https://blog.semmle.com/uboot-rce-nfs-vulnerability/

Additional References

• https://cert-portal.siemens.com/productcert/html/ssa-577017.html

References

• https://gitlab.com/u-boot/u-boot
• https://blog.semmle.com/uboot-rce-nfs-vulnerability/

• ←Previous
• Next→