Описание
Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used as a length field without any bounds check.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2020.05.0 (включая)
cpe:2.3:a:pengutronix:barebox:*:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00433
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-125
Связанные уязвимости
github
больше 3 лет назад
Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used as a length field without any bounds check.
EPSS
Процентиль: 62%
0.00433
Низкий
9.1 Critical
CVSS3
6.4 Medium
CVSS2
Дефекты
CWE-125