PT-2019-4728 · Wind River · Vxworks

Published 2019-08-09 · Updated 2022-08-16 · CVE-2019-12257

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.6 through 6.9

Description The issue is related to a buffer overflow in the DHCP client component, specifically a heap overflow when parsing DHCP Offer/ACK inside ipdhcpc. This can be exploited by a remote attacker using specially crafted DHCP packets to execute arbitrary code.

Recommendations For Wind River VxWorks versions 6.6 through 6.9, consider disabling the DHCP client component until a patch is available to prevent exploitation. Restrict access to the ipdhcpc component to minimize the risk of exploitation. Avoid using the DHCP client component in the affected versions until the issue is resolved.

Fix

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-120

Related Identifiers

BDU:2020-01279

CVE-2019-12257

Affected Products

Vxworks

References · 14

• https://windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12257 · Security Note
• https://support2.windriver.com/index.php?page=security-notices · Vendor Advisory
• https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12257 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12257 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01279 · Security Note
• https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12257 · Note
• https://t.me/cvenotify/26600 · Telegram Post
• https://security.netapp.com/advisory/ntap-20190802-0001 · Note
• https://support.f5.com/csp/article/K41190253 · Note
• https://belden.com/hubfs/support/security/bulletins/Belden_Security_Bulletin_BSECV-2019-05_1v3.pdf?hsLang=en · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf · Note
• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf · Note