CVE-2019-13120

Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which...

CVE-2019-13120

CVE-2019-13120 affects Amazon FreeRTOS up to v1.4.8. The vulnerability arises from insufficient length checking in prvProcessReceivedPublish, which can cause untargetable leakage of arbitrary memory on a device when an attacker sends a malformed MQTT publish to an Amazon IoT Thing interacting wit...

CVE-2019-13120: Out-of-bounds Read

Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which...

PT-2019-13136 · Amazon · Amazon Freertos

Name of the Vulnerable Software and Affected Versions: Amazon FreeRTOS versions up to and including 1.4.8 Description: The issue is related to a lack of length checking in the prvProcessReceivedPublish function, which can lead to the untargetable leakage of arbitrary memory contents on a device t...

CVE-2018-16598

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16599

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16601

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16602

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16524

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16603

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16522

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16523

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16600

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16525

creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...

CVE-2018-16601

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. A crafted IP header triggers a full memory space copy in prvProcessIPPacket, leading to denial of service and possibly...

CVE-2018-16602

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of DHCP responses in prvProcessDHCPReplies can be used for information disclosu...

CVE-2018-16603

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an...

CVE-2018-16601

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. A crafted IP header triggers a full memory space copy in prvProcessIPPacket, leading to denial of service and possibly...

CVE-2018-16603

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an...

CVE-2018-16602

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of DHCP responses in prvProcessDHCPReplies can be used for information disclosu...