CVE-2019-13106

Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.

Link	Resource
https://github.com/u-boot/u-boot/commits/master	Patch Third Party Advisory
https://lists.denx.de/pipermail/u-boot/2019-July/375516.html	Mailing List Patch
https://gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00004.html

Configuration 1

cpe:2.3:a:denx:u-boot:2019.07:rc4:*:*:*:*:*:* cpe:2.3:a:denx:u-boot:2019.07:rc1:*:*:*:*:*:* cpe:2.3:a:denx:u-boot:2019.07:rc2:*:*:*:*:*:* cpe:2.3:a:denx:u-boot:2019.07:rc3:*:*:*:*:*:* cpe:2.3:a:denx:u-boot:2019.07:-:*:*:*:*:*:* cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*

---

Published : 2019-08-06 08:15

Updated : 2019-10-01 06:15

---

NVD link : CVE-2019-13106

Mitre link : CVE-2019-13106

Leap

Opensuse

CWE-787