PT-2021-8423

CVE-2016-20009

Published

2021-03-11

Updated

2024-08-06

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.5 through 7

Description A DNS client stack-based buffer overflow in the ipdnsc decode name() function affects the software. This issue only affects products that are no longer supported by the maintainer.

Recommendations For versions 6.5 through 7, as these versions are no longer supported, there is no information about a newer version that contains a fix for this issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Alex Wheeler

David Barksdale

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers