PT-2019-4726 · Wind River · Vxworks
CVE-2019-12256
·
Publicado
2019-07-29
·
Atualizado
2022-08-16
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Wind River VxWorks versions 6.9 through vx7
Description
The issue is related to a buffer overflow in the IPv4 component, specifically a stack overflow when parsing IPv4 packets' IP options. This can be exploited by a remote attacker to execute arbitrary code by sending specially crafted IPv4 packets.
Recommendations
For Wind River VxWorks versions 6.9 through vx7, consider disabling the IPv4 component or restricting its use until a patch is available to prevent exploitation of the buffer overflow vulnerability.
Correção
Stack Overflow
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Vxworks