Vulnerabilities > CVE-2020-1939 - NULL Pointer Dereference vulnerability in Apache Nuttx

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

apache

CWE-476

critical

NVD

Published: 2020-05-12

Updated: 2024-11-21

Summary

The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereference bug. The NuttX RTOS itself is not affected. Users of the optional apps repository are affected only if they have enabled ftpd. Versions 6.15 to 8.2 are affected.

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache Nuttx 6.15 Apache Nuttx 6.16 Apache Nuttx 6.17 Apache Nuttx 6.18 Apache Nuttx 6.19 Apache Nuttx 6.20 Apache Nuttx 6.21 Apache Nuttx 6.22 Apache Nuttx 6.23 Apache Nuttx 6.24 Apache Nuttx 6.25 Apache Nuttx 6.26 Apache Nuttx 6.27 Apache Nuttx 6.28 Apache Nuttx 6.29 Apache Nuttx 6.30 Apache Nuttx 6.31 Apache Nuttx 6.32 Apache Nuttx 6.33 Apache Nuttx 7.1 Apache Nuttx 7.2 Apache Nuttx 7.3 Apache Nuttx 7.4 Apache Nuttx 7.5 Apache Nuttx 7.6 Apache Nuttx 7.7 Apache Nuttx 7.8 Apache Nuttx 7.9 Apache Nuttx 7.10 Apache Nuttx 7.11 Apache Nuttx 7.12 Apache Nuttx 7.13 Apache Nuttx 7.14 Apache Nuttx 7.15 Apache Nuttx 7.16 Apache Nuttx 7.17 Apache Nuttx 7.18 Apache Nuttx 7.19 Apache Nuttx 7.20 Apache Nuttx 7.21 Apache Nuttx 7.22 Apache Nuttx 7.23 Apache Nuttx 7.24 Apache Nuttx 7.25 Apache Nuttx 7.26 Apache Nuttx 7.27 Apache Nuttx 7.28 Apache Nuttx 7.29 Apache Nuttx 7.30 Apache Nuttx 7.31 Apache Nuttx 8.1 Apache Nuttx 8.2	52

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References