PT-2021-7238 · Siemens +1 · Scalance +2

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions prior to 6.5 Description: The issue is related to a possible heap overflow in the DHCP client of Wind River VxWorks. This could allow a remote attacker to execute arbitrary code. The vulnerability is also present i...

PT-2021-8246

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions through 6.8 Description The issue is related to a possible stack overflow in the DHCP server of the Wind River VxWorks real-time operating system. It is also described as a buffer overflow vulnerability in the DHCP...

PT-2021-18563

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions prior to 21.03 Description A specially crafted packet may lead to a buffer over-read on IKE. Recommendations For versions prior to 21.03, update to version 21.03 or later to resolve the issue...

CVE-2021-29997: Out-of-bounds Read

An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE...

CVE-2021-29998: Out-of-bounds Write

An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client...

CVE-2021-29999: Out-of-bounds Write

An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server...

Wind River VxWorks 缓冲区错误漏洞

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A buffer error vulnerability exists in Wind River VxWorks versions prior to 6.5 that stems from a possible heap overflow in the dhcp client...

Wind River VxWorks 缓冲区错误漏洞

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A security vulnerability exists in Wind River VxWorks version 6.8 that could lead to a dhcp server stack overflow...

Wind River VxWorks Buffer Overflow Vulnerability

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A buffer overflow vulnerability exists in Wind River VxWorks versions 6.5 through 7, which can be exploited by a remote attacker to submit a...

CVE-2016-20009

A DNS client stack-based buffer overflow in ipdnscdecodename affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2016-20009

A DNS client stack-based buffer overflow in ipdnscdecodename affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Stack overflow

A DNS client stack-based buffer overflow in ipdnscdecodename affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2016-20009

A DNS client stack-based buffer overflow in ipdnscdecodename affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2016-20009

Vulnerability: Wind River VxWorks 6.5–7 is affected by a DNS client stack-based buffer overflow in ipdnsc_decode_name(). The Red Hat/NVD-derived entries, CNVD, PRION, and PT Security notes confirm the issue affects Wind River VxWorks versions 6.5 through 7 and describe an out-of-bounds write in t...

Wind River VxWorks 缓冲区错误漏洞

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A buffer overflow vulnerability exists in Wind River VxWorks versions 6.5 through 7, which can be exploited by a remote attacker to submit a...

PT-2021-8423 · Wind River · Vxworks

Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.5 through 7 Description: A DNS client stack-based buffer overflow in the ipdnsc decode name function affects the software. This issue only affects products that are no longer supported by the maintainer...

CVE-2016-20009: Out-of-bounds Write

A DNS client stack-based buffer overflow in ipdnscdecodename affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

vxhunter

This is an offensive tool for embedded device analysis. It is a toolset for VxWorks based embedded device analyses, specifically designed for analyzing VxWorks firmware. The toolset includes plugins written in Python for analyzing firmware loading address, fixing function names with symbol tables...

Vulnerability fixed in VxWorks

In Wind River VxWorks, the memory allocator has a possible overflow when calculating the size of the memory block that should be allocated by calloc. The result is that the actual allocated memory is smaller than the buffer size specified by the arguments, leading to memory corruption. The...

CVE-2020-28895

In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...