Critical severity9.1NVD Advisory· Published Jun 7, 2020· Updated Jun 17, 2026
CVE-2020-13910
CVE-2020-13910
Description
Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used as a length field without any bounds check.
Affected products
3cpe:2.3:a:pengutronix:barebox:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pengutronix:barebox:*:*:*:*:*:*:*:*range: <=2020.05.0
- (no CPE)range: <=v2020.05.0
- Pengutronix/Bareboxdescription
Patches
Vulnerability mechanics
References
1- git.pengutronix.de/cgit/barebox/commit/net/nfs.cnvdPatchThird Party Advisory
News mentions
0No linked articles in our index yet.