679 matches found
CVE-2020-35198: Integer Overflow or Wraparound
An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...
Wind River VxWorks 输入验证错误漏洞
Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. An input validation error vulnerability exists in Wind River VxWorks 7 that stems from the fact that this incorrect memory allocation could...
The vulnerability of IGMP-based real-time operating system implementations in Wind River VxWorks allows a attacker to trigger a service failure.
The vulnerability of IGMP-based real-time operating system implementations by Wind River and VxWorks is related to the use of a zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2021-29997
An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE...
CVE-2021-29999
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server...
CVE-2021-29998
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client...
CVE-2021-29997
An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE...
CVE-2021-29998
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client...
CVE-2021-29999
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server...
Stack overflow
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server...
Design/Logic Flaw
An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE...
CVE-2021-29999
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server...
CVE-2021-29998
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client...
CVE-2021-29997
An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE...
CVE-2021-29997
An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE...
CVE-2021-29997
Wind River VxWorks 7 before 21.03 is affected by CVE-2021-29997. A specially crafted IKE packet may trigger a buffer over-read in the IKE processing, potentially causing service disruption. Impact is described as at least partial availability impact with network access and low attack complexity (...
CVE-2021-29999
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server...
CVE-2021-29999
CVE-2021-29999 affects Wind River VxWorks up to version 6.8, with a stack overflow vulnerability in the DHCP server. The available connected documents consistently describe a stack overflow issue in the DHCP server of VxWorks and do not provide further technical specifics, affected subcomponents,...
CVE-2021-29998
CVE-2021-29998 affects Wind River VxWorks before 6.5 due to a heap-based overflow in the DHCP client. Impact ranges from DoS to potential remote code execution (per ICS advisories). Affected products include Wind River VxWorks-based industrial systems. Mitigations from ICS/CISA advisories include...