CVE-2019-14196 — Out-of-bounds Write in U-boot

CWE-787 — Out-of-bounds WriteCWE-120 — Classic Buffer Overflow10 documents5 sources
Severity
9.8CRITICALNVD
EPSS
0.4%
top 38.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Denx U-bootDebian U-bootFedoraproject Fedora+2 more
Timeline
PublishedJul 31
Latest updateMay 24

Description

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages5 packages

▶debiandebian/u-boot< u-boot 2020.01+dfsg-1 (bookworm)+1
▶Debiandenx/u-boot< 2021.01+dfsg-5+deb11u1+6
▶NVDdenx/u-boot2019.07+2

Also affects: Fedora 36

🔴Vulnerability Details

4
GHSA
GHSA-pvgx-mr5j-54w6: An issue was discovered in Das U-Boot through 2019↗2022-05-24
▶
GHSA
GHSA-27g3-5ffj-8mw8: nfs_lookup_reply in net/nfs↗2022-05-17
▶
OSV
CVE-2022-30767: nfs_lookup_reply in net/nfs↗2022-05-16
▶
OSV
CVE-2019-14196: An issue was discovered in Das U-Boot through 2019↗2019-07-31
▶

📋Vendor Advisories

4
Microsoft
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because ↗2022-05-10
▶
Debian
CVE-2022-30767: u-boot - nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07...↗2022
▶
Microsoft
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.↗2019-07-09
▶
Debian
CVE-2019-14196: u-boot - An issue was discovered in Das U-Boot through 2019.07. There is an unbounded mem...↗2019
▶