Remote Buffer Overflow in Pengutronix Barebox through 2019.08.1: Exploiting a memcpy Vulnerability in nfs_readlink_reply

CVE-2019-15937 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy.

Learn more about our Web Application Penetration Testing UK.