PT-2019-4726 · Wind River · Vxworks

CVE-2019-12256

·

Publicado

2019-07-29

·

Atualizado

2022-08-16

CVSS v2.0

10

Crítica

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.9 through vx7
Description The issue is related to a buffer overflow in the IPv4 component, specifically a stack overflow when parsing IPv4 packets' IP options. This can be exploited by a remote attacker to execute arbitrary code by sending specially crafted IPv4 packets.
Recommendations For Wind River VxWorks versions 6.9 through vx7, consider disabling the IPv4 component or restricting its use until a patch is available to prevent exploitation of the buffer overflow vulnerability.

Correção

Stack Overflow

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2020-01276
CVE-2019-12256

Produtos afetados

Vxworks