CVE-2019-14193
An issue was discovered in Das U-Boot through 2019.07. There is an unb ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by Ubuntu (low).
Description
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 3.0 | u-boot | 2019.10-1.ph3 |
| debian 10 | u-boot | no fix listed |
| debian 11 | u-boot | 2020.01+dfsg-1 |
| debian 12 | u-boot | 2020.01+dfsg-1 |
| debian 13 | u-boot | 2020.01+dfsg-1 |
| debian 14 | u-boot | 2020.01+dfsg-1 |
| debian 8 | u-boot | no fix listed |
| debian 9 | u-boot | no fix listed |
| echo | u-boot | 2020.01+dfsg-1 |
| ubuntu 18.04 | u-boot | 2020.10+dfsg-1ubuntu0~18.04.2 |
| ubuntu 18.04-ESM | u-boot | 2020.10+dfsg-1ubuntu0~18.04.2 |
| ubuntu 20.04 | u-boot | 2021.01+dfsg-3ubuntu0~20.04.3 |
Show all 13 entries from 13 sources
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 3.0 | u-boot | 2019.10-1.ph3 |
| debian 10 | u-boot | no fix listed |
| debian 11 | u-boot | 2020.01+dfsg-1 |
| debian 12 | u-boot | 2020.01+dfsg-1 |
| debian 13 | u-boot | 2020.01+dfsg-1 |
| debian 14 | u-boot | 2020.01+dfsg-1 |
| debian 8 | u-boot | no fix listed |
| debian 9 | u-boot | no fix listed |
| echo | u-boot | 2020.01+dfsg-1 |
| ubuntu 18.04 | u-boot | 2020.10+dfsg-1ubuntu0~18.04.2 |
| ubuntu 18.04-ESM | u-boot | 2020.10+dfsg-1ubuntu0~18.04.2 |
| ubuntu 20.04 | u-boot | 2021.01+dfsg-3ubuntu0~20.04.3 |
| ubuntu 20.04-ESM | u-boot | 2021.01+dfsg-3ubuntu0~20.04.3 |
References
- https://blog.semmle.com/uboot-rce-nfs-vulnerability/
- https://cert-portal.siemens.com/productcert/html/ssa-577017.html
- https://gitlab.com/u-boot/u-boot
- https://gitlab.denx.de/u-boot/u-boot
- https://web.archive.org/web/20191130052117/https://blog.semmle.com/uboot-rce-nfs-vulnerability/
- https://www.cve.org/CVERecord?id=CVE-2019-14193