PT-2019-4726 · Wind River · Vxworks

CVE-2019-12256

·

Published

2019-07-29

·

Updated

2022-08-16

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.9 through vx7
Description The issue is related to a buffer overflow in the IPv4 component, specifically a stack overflow when parsing IPv4 packets' IP options. This can be exploited by a remote attacker to execute arbitrary code by sending specially crafted IPv4 packets.
Recommendations For Wind River VxWorks versions 6.9 through vx7, consider disabling the IPv4 component or restricting its use until a patch is available to prevent exploitation of the buffer overflow vulnerability.

Fix

Stack Overflow

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2020-01276
CVE-2019-12256

Affected Products

Vxworks