CVE-2019-13106

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
Siemens	RUGGEDCOM ROX MX5000	< V2.17.1
Siemens	RUGGEDCOM ROX MX5000RE	< V2.17.1
Siemens	RUGGEDCOM ROX RX1400	< V2.17.1
Siemens	RUGGEDCOM ROX RX1500	< V2.17.1
Siemens	RUGGEDCOM ROX RX1501	< V2.17.1
Siemens	RUGGEDCOM ROX RX1510	< V2.17.1
Siemens	RUGGEDCOM ROX RX1511	< V2.17.1
Siemens	RUGGEDCOM ROX RX1512	< V2.17.1
Siemens	RUGGEDCOM ROX RX1524	< V2.17.1
Siemens	RUGGEDCOM ROX RX1536	< V2.17.1
Siemens	RUGGEDCOM ROX RX5000	< V2.17.1

References

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00002.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00004.htmlMailing List, Third Party Advisory
https://gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75Third Party Advisory
https://github.com/u-boot/u-boot/commits/masterProduct
https://lists.denx.de/pipermail/u-boot/2019-July/375516.htmlMailing List, Patch
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00002.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00004.htmlMailing List, Third Party Advisory
https://gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75Third Party Advisory
https://github.com/u-boot/u-boot/commits/masterProduct
https://lists.denx.de/pipermail/u-boot/2019-July/375516.htmlMailing List, Patch
https://cert-portal.siemens.com/productcert/html/ssa-577017.html

Timeline

Published: Aug 6, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-131079.8Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c CVE-2019-131086.5An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because CVE-2019-131096.5An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because CVE-2019-13117.8A remote code execution vulnerability exists when the Windows Imaging API improperly handles objects in memory, aka 'Windows Imaging API Rem CVE-2019-131106.5A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of servi CVE-2019-131115.5A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation fo CVE-2019-131126.5A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash CVE-2019-131136.5Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW CVE-2019-131146.5http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by retu CVE-2019-131158.1In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an CVE-2019-131169.8The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserializat CVE-2019-131175.3In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumber