PT-2019-13519 · Denx Software Engineering+2 · Das U-Boot+2

Published 2019-07-31 · Updated 2026-05-12 · CVE-2019-14195

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2019.07

Description An issue was discovered in Das U-Boot. There is an unbounded memcpy with unvalidated length at nfs readlink reply in the "else" block after calculating the new path length.

Recommendations For versions prior to 2019.07, update to version 2019.07 or later to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2019-2839

ALT-PU-2020-2520

BDU:2025-13588

CVE-2019-14195

OPENSUSE-SU-2020:1930-1

OPENSUSE-SU-2020_1930-1

SUSE-SU-2020:3255-1

SUSE-SU-2020:3256-1

SUSE-SU-2020:3282-1

SUSE-SU-2020:3283-1

SUSE-SU-2020:3474-1

Affected Products

Alt Linux

Das U-Boot

Suse

References · 72

• https://osv.dev/vulnerability/SUSE-SU-2020:3256-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-14195 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-14195 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1930-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:3255-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-14195 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14195 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2020:3283-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:3474-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:3282-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14195 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13588 · Security Note
• https://cve.org/CVERecord?id=CVE-2019-14195 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-14195 · Vendor Advisory