Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-13104

In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.2%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
Products affected by CVE-2019-13104
  • Denx » U-Boot » Version: 2016.09
    cpe:2.3:a:denx:u-boot:2016.09
  • Denx » U-Boot » Version: 2016.09.01
    cpe:2.3:a:denx:u-boot:2016.09.01
  • Denx » U-Boot » Version: 2016.11
    cpe:2.3:a:denx:u-boot:2016.11
  • Denx » U-Boot » Version: 2017.01
    cpe:2.3:a:denx:u-boot:2017.01
  • Denx » U-Boot » Version: 2017.03
    cpe:2.3:a:denx:u-boot:2017.03
  • Denx » U-Boot » Version: 2017.05
    cpe:2.3:a:denx:u-boot:2017.05
  • Denx » U-Boot » Version: 2017.07
    cpe:2.3:a:denx:u-boot:2017.07
  • Denx » U-Boot » Version: 2017.09
    cpe:2.3:a:denx:u-boot:2017.09
  • Denx » U-Boot » Version: 2017.11
    cpe:2.3:a:denx:u-boot:2017.11
  • Denx » U-Boot » Version: 2018.01
    cpe:2.3:a:denx:u-boot:2018.01
  • Denx » U-Boot » Version: 2018.03
    cpe:2.3:a:denx:u-boot:2018.03
  • Denx » U-Boot » Version: 2018.05
    cpe:2.3:a:denx:u-boot:2018.05
  • Denx » U-Boot » Version: 2018.07
    cpe:2.3:a:denx:u-boot:2018.07
  • Denx » U-Boot » Version: 2018.09
    cpe:2.3:a:denx:u-boot:2018.09
  • Denx » U-Boot » Version: 2018.11
    cpe:2.3:a:denx:u-boot:2018.11
  • Denx » U-Boot » Version: 2019.01
    cpe:2.3:a:denx:u-boot:2019.01
  • Denx » U-Boot » Version: 2019.04
    cpe:2.3:a:denx:u-boot:2019.04
  • Denx » U-Boot » Version: 2019.07
    cpe:2.3:a:denx:u-boot:2019.07
  • Opensuse » Leap » Version: 15.0
    cpe:2.3:o:opensuse:leap:15.0
  • Opensuse » Leap » Version: 15.1
    cpe:2.3:o:opensuse:leap:15.1


Contact Us

Shodan ® - All rights reserved