PT-2019-4728 · Wind River · Vxworks
Publicado
2019-08-09
·
Atualizado
2022-08-16
·
CVE-2019-12257
CVSS v3.1
8.8
Alta
| Vetor | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Wind River VxWorks versions 6.6 through 6.9
Description
The issue is related to a buffer overflow in the DHCP client component, specifically a heap overflow when parsing DHCP Offer/ACK inside
ipdhcpc. This can be exploited by a remote attacker using specially crafted DHCP packets to execute arbitrary code.Recommendations
For Wind River VxWorks versions 6.6 through 6.9, consider disabling the DHCP client component until a patch is available to prevent exploitation. Restrict access to the
ipdhcpc component to minimize the risk of exploitation. Avoid using the DHCP client component in the affected versions until the issue is resolved.Correção
Heap Based Buffer Overflow
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Vxworks