CVE-2019-14195

Priority
Description
An issue was discovered in Das U-Boot through 2019.07. There is an
unbounded memcpy with unvalidated length at nfs_readlink_reply in the
"else" block after calculating the new path length.
Notes
Package
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):needs-triage
Ubuntu 18.04 LTS (Bionic Beaver):needs-triage
Ubuntu 19.04 (Disco Dingo):ignored (reached end-of-life)
Ubuntu 19.10 (Eoan Ermine):needs-triage
Ubuntu 20.04 (Focal Fossa):needs-triage
Patches:
Upstream:https://gitlab.denx.de/u-boot/u-boot/commit/cf3a4f1e86ecdd24f87b615051b49d8e1968c230
More Information

Updated: 2020-01-23 20:47:31 UTC (commit b4629892d998f2ede31f59bb7508dc50a92ac664)