CVE-2018-16598

2018-12-06T23:29:00
ID CVE-2018-16598
Type cve
Reporter cve@mitre.org
Modified 2019-01-04T00:00:00

Description

An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a sent DNS request.