PT-2019-18718

CVE-2019-7714

·

Publicado

2019-03-26

·

Atualizado

2023-09-20

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Interpeak IPWEBS on Green Hills INTEGRITY RTOS version 5.0.4
Description The issue is related to the allocation of 60 bytes for the HTTP Authentication header in Interpeak IPWEBS on Green Hills INTEGRITY RTOS. When copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.
Recommendations For Interpeak IPWEBS on Green Hills INTEGRITY RTOS version 5.0.4, consider implementing size checks when copying the HTTP Authentication header to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾