Lucene search
+L

318 matches found

Positive Technologies
Positive Technologies
•added 2021/11/17 12:00 a.m.•20 views

PT-2021-23999 · Freertos · Freertos

Name of the Vulnerable Software and Affected Versions: FreeRTOS versions 10.2.0 through 10.4.5 FreeRTOS versions through 10.4.6 Description: The issue affects FreeRTOS on ARMv7-M and ARMv8-M MPU platforms, where non-kernel code can call internal functions to raise privilege. This can lead to...

7.8CVSS7.8AI score0.00339EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2021/11/17 12:00 a.m.•42 views

CVE-2021-43997

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

8.2AI score0.00339EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/17 12:00 a.m.•1 views

CVE-2021-43997: Undefined Security Weakness

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

7.8CVSS6AI score0.00339EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/11/17 12:00 a.m.•18 views

Amazon FreeRTOS 代码问题漏洞

A code issue vulnerability exists in Amazon FreeRTOS, an open source operating system for microcontrollers from Amazon.com, which stems from the product's failure to add valid permissions. An attacker could invoke the functions via non-kernel code through this vulnerability...

7.8CVSS5.8AI score0.00339EPSS
SaveExploits0References5
CVE
CVE
•added 2021/11/17 12:00 a.m.•91 views

CVE-2021-43997

CVE-2021-43997 affects FreeRTOS ARMv7-M and ARMv8-M MPU ports. Versions 10.2.0–10.4.5 allow non‑kernel code to call the internal xPortRaisePrivilege function to raise privilege; versions up to 10.4.6 can enable a second‑stage privilege escalation if injected code branches inside an MPU API wrappe...

7.8CVSS7.9AI score0.00339EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/09/30 12:00 a.m.•13 views

The vulnerability of the real-time operating system FreeRTOS’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function in the queue.c file of the real-time operating system FreeRTOS is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9.8CVSS7.8AI score0.01382EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/05/03 10:15 p.m.•11 views

CVE-2021-32020

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory...

9.8CVSS5.4AI score0.01303EPSS
SaveExploits0References1
NVD
NVD
•added 2021/05/03 10:15 p.m.•27 views

CVE-2021-32020

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory...

9.8CVSS0.01303EPSS
SaveExploits0References1
Prion
Prion
•added 2021/05/03 10:15 p.m.•25 views

Design/Logic Flaw

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory...

7.5CVSS9.2AI score0.01303EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/05/03 10:15 p.m.•7 views

CVE-2021-32020

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory...

9.8CVSS7AI score0.01303EPSS
SaveExploits0References2
CVE
CVE
•added 2021/05/03 9:12 p.m.•93 views

CVE-2021-32020

CVE-2021-32020 affects the kernel of Amazon Web Services FreeRTOS prior to 10.4.3, where insufficient bounds checking during heap memory management is the root cause. The issue is exploitable over a network with low attack complexity and no authentication, and it carries high potential impact to ...

9.8CVSS9.2AI score0.01303EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/05/03 9:12 p.m.•34 views

CVE-2021-32020

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory...

9.5AI score0.01303EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/03 12:00 a.m.•7 views

CVE-2021-32020: Improper Restriction of Operations within the Bounds of a Memory Buffer

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory...

9.8CVSS5.8AI score0.01303EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/03 12:00 a.m.•16 views

Amazon Web Services FreeRTOS 缓冲区错误漏洞

Amazon FreeRTOS is an open source operating system for microcontrollers from Amazon.com, USA. A security vulnerability exists in Amazon Web Services FreeRTOS versions prior to 10.4.3 that stems from the kernel not having sufficient boundary checks during heap memory management...

9.8CVSS8.3AI score0.01303EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/04/23 12:00 a.m.•165 views

Amazon FreeRTOS integer overflow vulnerability (CNVD-2021-31956)

Amazon FreeRTOS is an open source operating system for microcontrollers from Amazon USA. An integer overflow vulnerability exists in queue.c in Amazon FreeRTOS versions prior to 10.4.3. No details of the vulnerability are provided at this time...

9.8CVSS7AI score0.01382EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/23 12:00 a.m.•16 views

Amazon FreeRTOS Integer Overflow Vulnerability

Amazon FreeRTOS is an open source operating system for microcontrollers from Amazon USA. An integer overflow vulnerability exists in streambuffer.c in Amazon FreeRTOS versions prior to 10.4.3. No details of the vulnerability are provided at this time...

9.8CVSS7AI score0.01382EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/22 6:15 p.m.•17 views

CVE-2021-31571

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation...

9.8CVSS5.5AI score0.01382EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/22 6:15 p.m.•39 views

CVE-2021-31571

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation...

9.8CVSS0.01382EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/22 6:15 p.m.•28 views

CVE-2021-31572

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in streambuffer.c for a stream buffer...

9.8CVSS0.01382EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/22 6:15 p.m.•10 views

CVE-2021-31571

The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation...

9.8CVSS7AI score0.01382EPSS
SaveExploits0References3
Rows per page
Query Builder