Critical severity9.8NVD Advisory· Published Jul 31, 2019· Updated May 12, 2026
CVE-2019-14198
CVE-2019-14198
Description
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23- Das U-Boot/U-Bootdescription
- osv-coords20 versionspkg:rpm/opensuse/u-boot&distro=openSUSE%20Leap%2015.1pkg:rpm/suse/u-boot&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/u-boot&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/u-boot-rpi3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5
< 2019.01-lp151.6.13.1+ 19 more
- (no CPE)range: < 2019.01-lp151.6.13.1
- (no CPE)range: < 2016.07-12.3.1
- (no CPE)range: < 2018.03-4.6.1
- (no CPE)range: < 2018.03-4.6.1
- (no CPE)range: < 2019.01-7.10.1
- (no CPE)range: < 2016.07-12.3.1
- (no CPE)range: < 2018.03-4.3.1
- (no CPE)range: < 2019.01-5.3.1
- (no CPE)range: < 2018.03-4.6.1
- (no CPE)range: < 2019.01-5.3.1
- (no CPE)range: < 2018.03-4.6.1
- (no CPE)range: < 2016.07-12.3.1
- (no CPE)range: < 2018.03-4.6.2
- (no CPE)range: < 2018.03-4.6.2
- (no CPE)range: < 2019.01-7.10.2
- (no CPE)range: < 2016.07-12.3.1
- (no CPE)range: < 2018.03-4.3.1
- (no CPE)range: < 2019.01-5.3.1
- (no CPE)range: < 2018.03-4.6.2
- (no CPE)range: < 2019.01-5.3.1
Patches
Vulnerability mechanics
References
2- blog.semmle.com/uboot-rce-nfs-vulnerability/nvdThird Party Advisory
- cert-portal.siemens.com/productcert/html/ssa-577017.htmlnvd
News mentions
1- Siemens Ruggedcom RoxCISA ICS Advisories