Barebox Security Vulnerabilities and Issues — Barebox CVE List

Lucene search

PengutronixBarebox

3 matches found

CVE•added 2020/06/07 8:15 p.m.•41 views

CVE-2020-13910

Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used as a length field without any bounds check.

9.1CVSS9.1AI score0.00433EPSS

CVE•added 2019/09/05 3:15 p.m.•29 views

CVE-2019-15937

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy.

9.8CVSS9.7AI score0.00756EPSS

CVE•added 2019/09/05 3:15 p.m.•25 views

CVE-2019-15938

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy.

9.8CVSS9.7AI score0.00756EPSS