CVE-2019-13105: Double Free
First published: Tue Aug 06 2019(Updated: )
Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| DENX U-Boot | =2019.07-rc1 | |
| DENX U-Boot | =2019.07-rc2 | |
| DENX U-Boot | =2019.07-rc3 | |
| DENX U-Boot | =2019.07-rc4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2019-13105.
What is the severity rating of CVE-2019-13105?
CVE-2019-13105 has a severity rating of 7.8 (high).
Which software versions are affected by CVE-2019-13105?
Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 are affected.
What is the impact of CVE-2019-13105?
CVE-2019-13105 can double-free a cached block of data when listing files in a crafted ext4 filesystem.
How can I fix CVE-2019-13105?
To fix CVE-2019-13105, it is recommended to update to a patched version of Das U-Boot.
- collector/nvd-index
- vendor/denx
- canonical/denx u-boot
- version/denx u-boot/2019.07-rc1
- version/denx u-boot/2019.07-rc2
- version/denx u-boot/2019.07-rc3
- version/denx u-boot/2019.07-rc4