High severity7.1NVD Advisory· Published Jul 29, 2019· Updated May 12, 2026
CVE-2019-13103
CVE-2019-13103
Description
A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
32cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*range: <2019.04
- cpe:2.3:a:denx:u-boot:2019.04:-:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.04:rc1:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.04:rc2:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.04:rc3:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.04:rc4:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.07:rc1:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.07:rc2:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.07:rc3:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.07:rc4:*:*:*:*:*:*
- Das/U-Bootdescription
- osv-coords20 versionspkg:rpm/opensuse/u-boot&distro=openSUSE%20Leap%2015.1pkg:rpm/suse/u-boot&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5
< 2019.01-lp151.6.13.1+ 19 more
- (no CPE)range: < 2019.01-lp151.6.13.1
- (no CPE)range: < 2016.07-12.3.1
- (no CPE)range: < 2018.03-4.6.1
- (no CPE)range: < 2018.03-4.6.1
- (no CPE)range: < 2019.01-7.10.1
- (no CPE)range: < 2016.07-12.3.1
- (no CPE)range: < 2018.03-4.3.1
- (no CPE)range: < 2019.01-5.3.1
- (no CPE)range: < 2018.03-4.6.1
- (no CPE)range: < 2019.01-5.3.1
- (no CPE)range: < 2018.03-4.6.1
- (no CPE)range: < 2016.07-12.3.1
- (no CPE)range: < 2018.03-4.6.2
- (no CPE)range: < 2018.03-4.6.2
- (no CPE)range: < 2019.01-7.10.2
- (no CPE)range: < 2016.07-12.3.1
- (no CPE)range: < 2018.03-4.3.1
- (no CPE)range: < 2019.01-5.3.1
- (no CPE)range: < 2018.03-4.6.2
- (no CPE)range: < 2019.01-5.3.1
Patches
Vulnerability mechanics
References
6- github.com/u-boot/u-boot/commits/masternvdPatchThird Party Advisory
- lists.denx.de/pipermail/u-boot/2019-July/375512.htmlnvdPatchThird Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-618620.pdfnvdThird Party Advisory
- gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75nvdThird Party Advisory
- cert-portal.siemens.com/productcert/html/ssa-577017.htmlnvd
- cert-portal.siemens.com/productcert/html/ssa-618620.htmlnvd
News mentions
1- Siemens Ruggedcom RoxCISA ICS Advisories