21 matches found
EUVD-2018-8336
Malware in sbrugna...
EUVD-2018-8405
Malware in sbrugna...
CVE-2018-16598
An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a...
CVE-2018-16526
Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code because of a Buffer Overflow during generation of a protocol checksum in...
CVE-2018-16601
An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. A crafted IP header triggers a full memory space copy in prvProcessIPPacket, leading to denial of service and possibly...
CVE-2018-16527
Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of ICMP packets in prvProcessICMPPacket...
CVE-2018-16602
An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of DHCP responses in prvProcessDHCPReplies can be used for information disclosu...
PT-2018-13640
Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description A crafted IP header can trigger a full memory space copy in...
PT-2018-13639
Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to V10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue is related to out of bounds memory access during...
PT-2018-13641
Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue is related to out of bounds memory access during...
PT-2018-13613
Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows remote attackers to execute arbitrary code...
PT-2018-13612
Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows information disclosure during the parsing ...
PT-2018-13642
Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description An issue in the affected software allows out of bounds acce...
PT-2018-13611
Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows division by zero in prvCheckOptions...
PT-2018-13615
Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows information disclosure during the parsing ...
CVE-2018-16599: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of NBNS packets in prvTreatNBNS can be used for information disclosure...
PT-2018-13638
Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to V10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue is related to out of bounds memory access during...
CVE-2018-16524: Exposure of Sensitive Information to an Unauthorized Actor
Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component allow information disclosure during parsing of TCP options in prvCheckOptions...
CVE-2018-16603: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an...
