CVE-2019-11059

Summary

CVE	CVE-2019-11059
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2019-05-10 20:29:00 UTC
Updated	2023-11-07 03:02:00 UTC
Description	Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.

Risk And Classification

Problem Types: CWE-119

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Denx	U-boot	2016.11	rc1	All	All
Application	Denx	U-boot	2016.11	rc2	All	All
Application	Denx	U-boot	2016.11	rc3	All	All
Application	Denx	U-boot	2016.11	rc1	All	All
Application	Denx	U-boot	2016.11	rc2	All	All
Application	Denx	U-boot	2016.11	rc3	All	All
Application	Denx	U-boot	All	All	All	All

References

Reference	Source	Link	Tags
Fix ext4 block group descriptor sizing (febbc583) · Commits · U-Boot / U-Boot · GitLab		git.denx.de
Fix ext4 block group descriptor sizing (febbc583) · Commits · U-Boot / U-Boot · GitLab	CONFIRM	git.denx.de	Mailing List, Patch, Third Party Advisory
Commits · u-boot/u-boot · GitHub	MISC	github.com	Patch, Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

671381 EulerOS Security Update for uboot-tools (EulerOS-SA-2022-1312)
671382 EulerOS Security Update for uboot-tools (EulerOS-SA-2022-1296)
750595 OpenSUSE Security Update for u-boot (openSUSE-SU-2020:1930-1)