CVE-2019-14196 An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in Das U-Boot NFS Handler Vulnerabilities Eleven Common Vulnerabilities and Exposures (CVEs) have been identified in Das U-Boot, specifically affecting the NFS handler functions. These vulnerabilities, which include stack-based buffer overflows and unbounded memory copies, were discovered in the 2019.07 version and could potentially allow for unauthorized access or data corruption. All identified CVEs were published on July 31, 2019. 12 sources 54