← CVE Intelligence

CVE-2019-5038

n/a / Nest Labs PUBLISHED

Description (CNA)

An exploitable command execution vulnerability exists in the print-tlv command of Weave tool. A specially crafted weave TLV can trigger a stack-based buffer overflow, resulting in code execution. An attacker can trigger this vulnerability by convincing the user to open a specially crafted Weave command.

Affected (CNA)

Vendor / productVersions
n/a / Nest Labsaffected Nest Labs Openweave-core 4.0.2

CWE

CWE-121

References

ADP enrichment

CVE

No English description supplied.