CVE-2019-12256 — Classic Buffer Overflow in Vxworks

CWE-120 — Classic Buffer OverflowCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
13.8%
top 5.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Siemens Power Meter 9410 FirmwareSiemens Ruggedcom Win7000 FirmwareSiemens Ruggedcom Win7018 Firmware+8 more
Timeline
PublishedAug 9
Latest updateMay 24

Description

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages11 packages

▶NVDwindriver/vxworks6.5 — 6.9.4.12

🔴Vulnerability Details

2
GHSA
GHSA-5g99-hg5x-7m26: Wind River VxWorks 6↗2022-05-24
▶
CVEList
CVE-2019-12256: Wind River VxWorks 6↗2019-08-09
▶
CVE-2019-12256 — Classic Buffer Overflow in Vxworks | cvebase