Lucene search

K
osvGoogleOSV:CVE-2018-16598
HistoryDec 06, 2018 - 11:29 p.m.

CVE-2018-16598

2018-12-0623:29:00
Google
osv.dev
3

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a sent DNS request.

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

Related for OSV:CVE-2018-16598