CVE-2019-14195

2019-07-3113:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.8%

JSON

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the “else” block after calculating the new path length.

CPENameOperatorVersion
u-booteqU-Boot-0_4_0
u-booteq2017.03-rc2
u-booteq2017.11-rc4
u-booteq2018.01-rc3
u-booteq2016.05-rc1
u-booteq2014.07
u-booteq2015.01
u-booteq2009.01-rc2
u-booteqLABEL_2003_04_15_1900
u-booteqLABEL_2003_06_29_0145

Name	Operator	Version
u-boot	eq	U-Boot-0_4_0
u-boot	eq	2017.03-rc2
u-boot	eq	2017.11-rc4
u-boot	eq	2018.01-rc3
u-boot	eq	2016.05-rc1
u-boot	eq	2014.07
u-boot	eq	2015.01
u-boot	eq	2009.01-rc2
u-boot	eq	LABEL_2003_04_15_1900
u-boot	eq	LABEL_2003_06_29_0145