critical
CVE-2019-14194
An issue was discovered in Das U-Boot through 2019.07. There is an unb ...
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by Ubuntu (low).
Description
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 3.0 | u-boot | 2019.10-1.ph3 |
| debian 10 | u-boot | no fix listed |
| debian 11 | u-boot | 2020.01+dfsg-1 |
| debian 12 | u-boot | 2020.01+dfsg-1 |
| debian 13 | u-boot | 2020.01+dfsg-1 |
| debian 14 | u-boot | 2020.01+dfsg-1 |
| debian 8 | u-boot | no fix listed |
| debian 9 | u-boot | no fix listed |
| echo | u-boot | 2020.01+dfsg-1 |
| ubuntu 18.04 | u-boot | 2020.10+dfsg-1ubuntu0~18.04.2 |
| ubuntu 18.04-ESM | u-boot | 2020.10+dfsg-1ubuntu0~18.04.2 |
| ubuntu 20.04 | u-boot | 2021.01+dfsg-3ubuntu0~20.04.3 |
Show all 13 entries from 13 sources
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 3.0 | u-boot | 2019.10-1.ph3 |
| debian 10 | u-boot | no fix listed |
| debian 11 | u-boot | 2020.01+dfsg-1 |
| debian 12 | u-boot | 2020.01+dfsg-1 |
| debian 13 | u-boot | 2020.01+dfsg-1 |
| debian 14 | u-boot | 2020.01+dfsg-1 |
| debian 8 | u-boot | no fix listed |
| debian 9 | u-boot | no fix listed |
| echo | u-boot | 2020.01+dfsg-1 |
| ubuntu 18.04 | u-boot | 2020.10+dfsg-1ubuntu0~18.04.2 |
| ubuntu 18.04-ESM | u-boot | 2020.10+dfsg-1ubuntu0~18.04.2 |
| ubuntu 20.04 | u-boot | 2021.01+dfsg-3ubuntu0~20.04.3 |
| ubuntu 20.04-ESM | u-boot | 2021.01+dfsg-3ubuntu0~20.04.3 |