Vulnerabilities > CVE-2020-1939 - NULL Pointer Dereference vulnerability in Apache Nuttx

CVSS 5.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

high complexity

apache

CWE-476

NVD

Published: 2020-05-12

Updated: 2020-05-19

Summary

The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereference bug. The NuttX RTOS itself is not affected. Users of the optional apps repository are affected only if they have enabled ftpd. Versions 6.15 to 8.2 are affected.

Vulnerable Configurations

Part	Description	Count
Application	Apache Apache Nuttx 6.15 Apache Nuttx 6.16 Apache Nuttx 6.17 Apache Nuttx 6.18 Apache Nuttx 6.19 Apache Nuttx 6.20 Apache Nuttx 6.21 Apache Nuttx 6.22 Apache Nuttx 6.23 Apache Nuttx 6.24 Apache Nuttx 6.25 Apache Nuttx 6.26 Apache Nuttx 6.27 Apache Nuttx 6.28 Apache Nuttx 6.29 Apache Nuttx 6.30 Apache Nuttx 6.31 Apache Nuttx 6.32 Apache Nuttx 6.33 Apache Nuttx 7.1 Apache Nuttx 7.2 Apache Nuttx 7.3 Apache Nuttx 7.4 Apache Nuttx 7.5 Apache Nuttx 7.6 Apache Nuttx 7.7 Apache Nuttx 7.8 Apache Nuttx 7.9 Apache Nuttx 7.10 Apache Nuttx 7.11 Apache Nuttx 7.12 Apache Nuttx 7.13 Apache Nuttx 7.14 Apache Nuttx 7.15 Apache Nuttx 7.16 Apache Nuttx 7.17 Apache Nuttx 7.18 Apache Nuttx 7.19 Apache Nuttx 7.20 Apache Nuttx 7.21 Apache Nuttx 7.22 Apache Nuttx 7.23 Apache Nuttx 7.24 Apache Nuttx 7.25 Apache Nuttx 7.26 Apache Nuttx 7.27 Apache Nuttx 7.28 Apache Nuttx 7.29 Apache Nuttx 7.30 Apache Nuttx 7.31 Apache Nuttx 8.1 Apache Nuttx 8.2	52

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

https://lists.apache.org/thread.html/re3adc65ff4d8d9c34e5bccba3941a28cbb0a47191c150df2727e101d%40%3Cdev.nuttx.apache.org%3E