CVE Catalog

CVE-2019-14198

Critical
Published: Translated: NVD NIST

Summary

An issue was discovered in Das U-Boot through 2019.07 related to unbounded memcpy occurring in nfs_read_reply when calling store_block in the NFSv3 case.

Risk Assessment

This vulnerability may lead to unauthorized memory access, posing a risk to the integrity and confidentiality of data within the system.

Recommendation

It is recommended to update to the latest version of Das U-Boot to mitigate this vulnerability and conduct a security audit of the system.

Original NVD description (English source)

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS