PT-2019-13128 · Denx+2 · Das U-Boot+2
Paul Emge
·
Publicado
2019-07-06
·
Atualizado
2022-04-18
·
CVE-2019-13104
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Das U-Boot versions 2016.11-rc1 through 2019.07-rc4
Description
An underflow issue can cause the memcpy() function to overwrite a large amount of data, including the whole stack, when reading a crafted ext4 filesystem.
Recommendations
For Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, consider avoiding the use of crafted ext4 filesystems until a fix is available. As a temporary workaround, restrict access to untrusted filesystems to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
Correção
Integer Underflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Das U-Boot
Suse