CVE-2019-14192

Critical

Published: 31/07/2019(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Das U-Boot through 2019.07 related to unbounded memcpy when parsing a UDP packet. This issue arises from an integer underflow in net_process_received_packet during an nc_input_packet call.

Risk Assessment

This vulnerability may lead to unexpected system behavior, potentially resulting in crashes or uncontrolled memory usage. It poses a risk to the integrity and availability of the system.

Recommendation

It is recommended to update to the latest version of Das U-Boot to mitigate this vulnerability. Additionally, monitoring and analyzing UDP traffic is advised to detect potential exploitation attempts.

Original NVD description (English source)

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.