« Volver al listado

CVE-2019-14193

Estado: ModificadaCrítica (9.8)—

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Denx — U-boot

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-14193",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
      "affectedData": [
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX MX5000",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX MX5000RE",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX RX1400",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX RX1500",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX RX1501",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX RX1510",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX RX1511",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX RX1512",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX RX1524",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX RX1536",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "vendor": "Siemens",
          "product": "RUGGEDCOM ROX RX5000",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "V2.17.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2019-07-31T13:15:13.260",
  "references": [
    {
      "url": "https://blog.semmle.com/uboot-rce-nfs-vulnerability/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://gitlab.com/u-boot/u-boot",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://web.archive.org/web/20191130052117/https://blog.semmle.com/uboot-rce-nfs-vulnerability/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://blog.semmle.com/uboot-rce-nfs-vulnerability/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://gitlab.com/u-boot/u-boot",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-577017.html",
      "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the \"if\" block after calculating the new path length."
    },
    {
      "lang": "es",
      "value": "Se detectó un problema en Das U-Boot hasta versión 2019.07. Se presenta un memcpy ilimitado con una longitud no válida en la función nfs_readlink_reply, en el bloque \"if\" después de calcular la nueva longitud de ruta (path)."
    }
  ],
  "lastModified": "2026-06-17T02:17:54.940",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E42ED17C-F9DC-4584-B102-6DB9C48C23E9",
              "versionEndIncluding": "2019.07"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}