CVE-2020-13910

2020-06-0720:15:10

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used as a length field without any bounds check.

CPENameOperatorVersion
bareboxeq2019.11.0
bareboxeq2017.10.0
bareboxeq2015.12.0
bareboxeq2020.05.0
bareboxeq2012.05.0
bareboxeq2020.01.0
bareboxeq2013.12.0
bareboxeq2015.06.0
bareboxeq2010.06.0
bareboxeq2011.09.0

Name	Operator	Version
barebox	eq	2019.11.0
barebox	eq	2017.10.0
barebox	eq	2015.12.0
barebox	eq	2020.05.0
barebox	eq	2012.05.0
barebox	eq	2020.01.0
barebox	eq	2013.12.0
barebox	eq	2015.06.0
barebox	eq	2010.06.0
barebox	eq	2011.09.0