679 matches found
CVE-2020-28895
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...
Memory corruption
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...
CVE-2020-28895 integer overflow in calloc
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...
CVE-2020-28895
CVE-2020-28895 affects Wind River VxWorks: the memory allocator can overflow when calculating the size for calloc(), causing the allocated memory to be smaller than the requested buffer and leading to memory corruption. The vulnerability is documented across multiple sources (e.g., Wind River adv...
CVE-2020-28895: Integer Overflow or Wraparound
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...
Wind River VxWorks Input Validation Error Vulnerability
Wind River VxWorks is an embedded real-time operating system RTOS from Wind River Systems USA. Wind River VxWorks suffers from an input validation error vulnerability that originates from memory corruption when the actual memory allocated is smaller than the buffer size specified by a parameter...
PT-2021-11591
Name of the Vulnerable Software and Affected Versions: Wind River VxWorks affected versions not specified Description: The issue is related to a possible overflow in the memory allocator when calculating the size of the memory block to be allocated by calloc. This results in the actual memory...
CVE-2020-11440
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root...
CVE-2020-11440
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root...
Code injection
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root...
CVE-2020-11440
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root...
CVE-2020-11440
CVE-2020-11440 describes a vulnerability in Wind River VxWorks (WebCLI) where httpRpmFs fails to validate escaping attempts from the web root, potentially exposing sensitive data. The NVD entry notes a network-based attack surface with a CVSS v3.1 base score of 7.5 (High) and a CVSS v2 base score...
PT-2020-12609
Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 5.5 through 7 SR0640 Description The issue is related to the httpRpmFs in WebCLI, which has no check for an escape from the web root. This allows for potential unauthorized access. Recommendations For versions 5.5...
CVE-2020-11440: Undefined Security Weakness
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root...
Wind River Systems VxWorks IGMP Component Code Issue Vulnerability
Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems, Inc.IGMP is one of the Internet Group Management Protocol components. A code issue vulnerability exists in the IGMP component of Wind River Systems VxWorks. The vulnerability arises from an improper...
Wind River Systems VxWorks tftp client library resource management error vulnerability
Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems, Inc. tftp client library is one of the TFTP Common File Transfer Protocol client libraries. A resource management error vulnerability exists in the tftp client library in Wind River Systems VxWorks...
CVE-2020-10664
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...
CVE-2020-10664
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...