Lucene search
K

27 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в open-iscsi

A issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data. It...

8.2CVSS7.6AI score0.00261EPSS
Exploits0References2
VulnCheck KEV
VulnCheck KEV
added 2025/06/10 12:0 a.m.3 views

VulnCheck KEV: CVE-2019-12263

Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component issue 4 of 4. There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition...

8.1CVSS5.8AI score0.00719EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/06/10 12:0 a.m.1 views

VulnCheck KEV: CVE-2019-12255

Wind River VxWorks has a Buffer Overflow in the TCP component issue 1 of 4. This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow...

9.8CVSS5.8AI score0.82215EPSS
Exploits5References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:34 a.m.7 views

CVE-2019-12261

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host...

9.8CVSS7AI score0.17603EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 3:55 a.m.1 views

SUSE CVE-2020-17437

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by...

5.3CVSS7.1AI score0.00261EPSS
Exploits0References18
OSV
OSV
added 2022/07/22 11:3 a.m.2 views

OESA-2022-1757 Open-iSCSI security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI. Security Fixes: An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore th...

8.2CVSS7.1AI score0.00261EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/02/22 12:0 a.m.32 views

EulerOS 2.0 SP2 : iscsi-initiator-utils (EulerOS-SA-2021-1307)

According to the versions of the iscsi-initiator-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when...

8.2CVSS7.2AI score0.00261EPSS
Exploits0References4
OSV
OSV
added 2020/12/11 11:15 p.m.1 views

DEBIAN-CVE-2020-17437

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by...

8.2CVSS8AI score0.00261EPSS
Exploits0References1
OSV
OSV
added 2020/12/01 12:0 a.m.0 views

UBUNTU-CVE-2020-17437

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by...

8.2CVSS6AI score0.00261EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.0 views

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from errors related to the TCP Urgent Pointer during the use of shared resources „Race Conditions“. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending...

8.1CVSS0.00719EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/03/27 12:0 a.m.0 views

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to trigger service interruptions.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from the loss of the integer value “TCP Urgent Pointer=0”. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted TCP packets...

10CVSS0.82215EPSS
Exploits5References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/03/27 12:0 a.m.0 views

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks stems from errors in the TCP Urgent Pointer during the “connect” operation when connecting to a remote host. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially...

10CVSS0.17603EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/03/27 12:0 a.m.1 views

The vulnerability of TCP protocols in real-time operating systems like Wind River VxWorks allows attackers to execute arbitrary code.

The vulnerability of the TCP protocol in real-time operating systems like Wind River VxWorks is related to errors in the TCP Urgent Pointer. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted TCP packets...

10CVSS0.25726EPSS
Exploits0References9Affected Software5
0day.today
0day.today
added 2019/08/12 12:0 a.m.77 views

VxWorks 6.8 - TCP Urgent Pointer = 0 Integer Underflow Exploit

Exploit Title: VxWorks TCP Urgent pointer = 0 integer underflow vulnerability Discovered By: Armis Security PoC Author: Zhou Yu twitter: @504137480 Vendor Homepage: https://www.windriver.com Tested on: VxWorks 6.8 CVE: CVE-2019-12255 More Details:...

9.8CVSS0.3AI score0.82215EPSS
Exploits5
Packet Storm
Packet Storm
added 2019/08/12 12:0 a.m.312 views

VxWorks 6.8 Integer Underflow

Exploit Title: VxWorks TCP Urgent pointer = 0 integer underflow vulnerability Discovered By: Armis Security PoC Author: Zhou Yu twitter: @504137480 Vendor Homepage: https://www.windriver.com Tested on: VxWorks 6.8 CVE: CVE-2019-12255 More Details:...

0.8AI score0.82215EPSS
Exploits5
exploitpack
exploitpack
added 2019/08/12 12:0 a.m.51 views

VxWorks 6.8 - TCP Urgent Pointer 0 Integer Underflow

VxWorks 6.8 - TCP Urgent Pointer 0 Integer Underflow Exploit Title: VxWorks TCP Urgent pointer = 0 integer underflow vulnerability Discovered By: Armis Security PoC Author: Zhou Yu twitter: @504137480 Vendor Homepage: https://www.windriver.com Tested on: VxWorks 6.8 CVE: CVE-2019-12255 More...

7.5CVSS0.5AI score0.82215EPSS
Exploits5
OSV
OSV
added 2019/08/09 9:15 p.m.1 views

CVE-2019-12260

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component issue 2 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option...

9.8CVSS7.5AI score0.25726EPSS
Exploits0References11
OSV
OSV
added 2019/08/09 9:15 p.m.1 views

CVE-2019-12261

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host...

9.8CVSS7.5AI score0.17603EPSS
Exploits0References10
Prion
Prion
added 2019/08/09 9:15 p.m.22 views

Buffer overflow

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host...

7.5CVSS9.3AI score0.17603EPSS
Exploits0References10Affected Software12
Cvelist
Cvelist
added 2019/08/09 8:27 p.m.17 views

CVE-2019-12261

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component issue 3 of 4. This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect to a remote host...

9.5AI score0.17603EPSS
Exploits0References10
Rows per page
Query Builder