PT-2019-18718 · Interpeak+1 · Interpeak Ipwebs+1

·

CVE-2019-7714

·

تاريخ النشر

2019-03-26

·

تاريخ التحديث

2023-09-20

CVSS v3.1

9.8

حرجة

المتجهAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Interpeak IPWEBS on Green Hills INTEGRITY RTOS version 5.0.4
Description The issue is related to the allocation of 60 bytes for the HTTP Authentication header in Interpeak IPWEBS on Green Hills INTEGRITY RTOS. When copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.
Recommendations For Interpeak IPWEBS on Green Hills INTEGRITY RTOS version 5.0.4, consider implementing size checks when copying the HTTP Authentication header to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

استغلال

Memory Corruption

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

CVE-2019-7714

المنتجات المتأثرة

Green Hills Integrity Rtos
Interpeak Ipwebs