CVE-2019-15938

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfsreadlinkreq in fs/nfs.c because a length field is directly used for a memcpy...

CVE-2019-15938

Pengutronix barebox (through 2019.08.1) is affected by a remote buffer overflow in nfs_readlink_req (fs/nfs.c), where a length field is directly used in memcpy. This root cause enables an overflow over the network vector, with CVSS data indicating high/critical impact (network attack, no user int...