CVE-2020-1939

The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs

published May 12, 2020

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

⚠️ There's a NULL pointer dereference just waiting for a chance to crash your ftpd service! If you're using Apache NuttX's optional apps repository, pay close attention! 🚨 Think of this vulnerability like a restaurant that accidentally serves a dish with a missing main ingredient. Without it, the whole meal can turn disastrous, leaving everyone hungry and waiting for a resolution! If an attacker stumbles upon this bug while ftpd is enabled, it can lead to service crashes or unexpected behavior. This means users might find themselves locked out, affecting operations and user experience.

Put simply

Think of this vulnerability like a restaurant that accidentally serves a dish with a missing main ingredient. Without it, the whole meal can turn disastrous, leaving everyone hungry and waiting for a resolution! The issue arises in the ftpd component of the Apache NuttX optional apps repository, where a NULL pointer dereference can occur, leading to potential crashes or instability in the service when ftpd is active.

What to do

If an attacker stumbles upon this bug while ftpd is enabled, it can lead to service crashes or unexpected behavior. This means users might find themselves locked out, affecting operations and user experience. To secure your systems, ensure that you're on a version prior to 6.15 or upgrade to version 8.2 and later. If you're not using ftpd, consider disabling it altogether in your NuttX configuration. You've got this! With a few quick updates, you'll have everything running smoothly in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02559 · 85.0th percentile
Published
2020-05-12T14:57Z
EPSS history
Timeline
  • 12 MAY 14:57Z
    The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs
    cvelistv5