Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Barebox bootloader allows remote code execution via NFS

CVE-2019-15937 · published 7 years ago
Summary

The Barebox bootloader version up to 2019.08.1 can be tricked into copying more data than it should when handling NFS file links. An attacker on the network could cause the bootloader to run arbitrary code, potentially taking control of the device. Update Barebox to a version newer than 2019.08.1 or apply the vendor's patch to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
pengutronix barebox <= 2019.08.1
cpe:2.3:a:pengutronix:barebox:*:*:*:*:*:*:*:*
Original advisory text
Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy.
Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published5 Sep 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-15937 · NVD
Track software like this
Free during beta