PT-2019-19900 · Wind River · Vxworks

Publicado 2019-05-29 · Atualizado 2019-05-29 · CVE-2019-9865

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions prior to 6.9.1

Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code due to an integer overflow triggered by a specially crafted RPC request when RPC is enabled.

Recommendations For versions prior to 6.9.1, update to version 6.9.1 or later to resolve the issue.

Correção

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2019-9865

Produtos afetados

Vxworks

Referências · 4

• https://support2.windriver.com/index.php?page=security-notices · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-9865 · Aviso do Fabricante
• https://windriver.com/feeds/wind_river_security_notices.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9865 · Nota de Segurança