CVE-2019-11059: Buffer Overflow
First published: Fri May 10 2019(Updated: )
Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| DENX U-Boot | >=2016.11<=2019.04 | |
| DENX U-Boot | =2016.11-rc1 | |
| DENX U-Boot | =2016.11-rc2 | |
| DENX U-Boot | =2016.11-rc3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-11059?
CVE-2019-11059 is a vulnerability that affects Das U-Boot 2016.11-rc1 through 2019.04 and can result in a buffer overflow due to mishandling the ext4 64-bit extension.
How severe is CVE-2019-11059?
CVE-2019-11059 has a severity rating of 9.8 (critical).
How does CVE-2019-11059 affect DENX U-Boot?
CVE-2019-11059 affects DENX U-Boot versions 2016.11-rc1 through 2019.04 by mishandling the ext4 64-bit extension, potentially leading to a buffer overflow.
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-11059?
The Common Weakness Enumeration (CWE) ID for CVE-2019-11059 is 119.
Are there any references available for CVE-2019-11059?
Yes, you can find references for CVE-2019-11059 at the following links: [link1](https://git.denx.de/?p=u-boot.git;a=commit;h=febbc583319b567fe3d83e521cc2ace9be8d1501), [link2](https://github.com/u-boot/u-boot/commits/master)
- collector/nvd-index
- vendor/denx
- canonical/denx u-boot
- version/denx u-boot/2016.11
- version/denx u-boot/2019.04
- version/denx u-boot/2016.11-rc1
- version/denx u-boot/2016.11-rc2
- version/denx u-boot/2016.11-rc3