CVE-2019-14192
published 2019-07-31CVE-2019-14192: An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer…
PriorityP344critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
2.67%
84.0th percentile
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | u-boot | < u-boot 2020.01+dfsg-1 (bookworm) | u-boot 2020.01+dfsg-1 (bookworm) |
| denx | u-boot | <= 2019.07 | — |
| denx | u-boot | >= 0 < 2020.01+dfsg-1 | 2020.01+dfsg-1 |
| denx | u-boot | >= 0 < 2020.01+dfsg-1 | 2020.01+dfsg-1 |
| denx | u-boot | >= 0 < 2020.01+dfsg-1 | 2020.01+dfsg-1 |
| denx | u-boot | >= 0 < 2020.01+dfsg-1 | 2020.01+dfsg-1 |
| msrc | azl3_qemu_8.2.0-16_on_azure_linux_3.0 | — | — |
| msrc | cbl2_qemu_6.2.0-24_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_msrc9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mf7g-4632-2pqg: An issue was discovered in Das U-Boot through 2019
ghsa_unreviewed·2022-05-24
CVE-2019-14192 [CRITICAL] GHSA-mf7g-4632-2pqg: An issue was discovered in Das U-Boot through 2019
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
OSV
CVE-2019-14192: An issue was discovered in Das U-Boot through 2019
osv·2019-07-31·CVSS 9.8
CVE-2019-14192 [CRITICAL] CVE-2019-14192: An issue was discovered in Das U-Boot through 2019
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
Microsoft
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
vendor_msrc·2019-07-09·CVSS 9.8
CVE-2019-14192 [CRITICAL] CWE-191 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE
Debian
CVE-2019-14192: u-boot - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded mem...
vendor_debian·2019·CVSS 9.8
CVE-2019-14192 [CRITICAL] CVE-2019-14192: u-boot - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded mem...
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
Scope: local
bookworm: resolved (fixed in 2020.01+dfsg-1)
bullseye: resolved (fixed in 2020.01+dfsg-1)
forky: resolved (fixed in 2020.01+dfsg-1)
sid: resolved (fixed in 2020.01+dfsg-1)
trixie: resolved (fixed in 2020.01+dfsg-1)
No detection rules found.
No public exploits indexed.
arXiv
Attacker Control and Bug Prioritization
arxiv_cs_cr·2025-03-31
Attacker Control and Bug Prioritization
Attacker Control and Bug Prioritization
As bug-finding methods improve, bug-fixing capabilities are exceeded, resulting in an accumulation of potential vulnerabilities. There is thus a need for efficient and precise bug prioritization based on exploitability. In this work, we explore the notion of control of an attacker over a vulnerability's parameters, which is an often overlooked factor of exploitability. We show that taint as well as straightforward qualitative and quantitative notions of control are not enough to effectively differentiate vulnerabilities. Instead, we propose to focus analysis on feasible value sets, which we call domains of control, in order to better take into account threat models and expert insight. Our new Shrink and Split algorithm efficiently extracts domains o
arXiv
Attacker Control and Bug Prioritization
arxiv_fulltext·2025-03-31
Attacker Control and Bug Prioritization
Attacker Control and Bug Prioritization
Guilhem Lacombe
Université Paris-Saclay, CEA, List, France
[email protected]
Sébastien Bardin
Université Paris-Saclay, CEA, List, France
[email protected]
## Abstract
As bug-finding methods improve, bug-fixing capabilities are exceeded, resulting in an accumulation of potential vulnerabilities.
There is thus a need for efficient and precise bug prioritization based on exploitability.
In this work, we explore the notion of control of an attacker over a vulnerability's parameters, which is an often overlooked factor of exploitability.
We show that taint as well as straightforward qualitative and quantitative notions of control are not enough to effectively differentiate vulnerabilities.
Instead, we propose to focus analysis on
2019-07-31
Published