CVE-2020-1939

9.8CRITICAL

Key Information:

Vendor
Apache
Status
Apache Nuttx (incubating)
Vendor
CVE Published:
12 May 2020

Summary

The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereference bug. The NuttX RTOS itself is not affected. Users of the optional apps repository are affected only if they have enabled ftpd. Versions 6.15 to 8.2 are affected.

Affected Version(s)

Apache NuttX (incubating) Apache NuttX (incubating) 6.15 to 8.2

References

https://lists.apache.org/thread.html/re3adc65ff4d8d9c34e5...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.