CVE-2019-15938: Buffer Overflow
Published Sep 5, 2019
·Updated
Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfsreadlinkreq in fs/nfs.c because a length field is directly used for a memcpy.
Affected Software
1 affected component
Pengutronix barebox<=2019.08.1
Remediation
Event History
Sep 5, 2019
CVE Published
via MITRE·02:06 PM
Data Sourced
via MITRE·02:06 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15938?
CVE-2019-15938 has been assigned a medium severity level due to its potential for a remote buffer overflow vulnerability.
2
How do I fix CVE-2019-15938?
To fix CVE-2019-15938, upgrade to a version of Barebox that is newer than 2019.08.1, which includes a patch for the vulnerability.
3
What versions of Barebox are affected by CVE-2019-15938?
Barebox versions up to and including 2019.08.1 are affected by CVE-2019-15938.
4
What type of vulnerability is CVE-2019-15938?
CVE-2019-15938 is a remote buffer overflow vulnerability that can be exploited through the NFS protocol.
5
Which component of Barebox is impacted by CVE-2019-15938?
CVE-2019-15938 specifically impacts the nfs_readlink_req function in the fs/nfs.c file of Barebox.