news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2019-13106

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
7.8 High
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Risk score
62.4
Published
2019-08-06
Status
Modified

Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.

Weaknesses

CWE-787

Coverage 1

Advisories and references