CVE-2019-15937

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-09-05

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Barebox (Pengutronix)

References

• https://git.pengutronix.de/cgit/barebox/commit/net/nfs.c?h=next&id=84986ca024462058574432b5483f4bf9136c538d