342 matches found
PT-2020-6442
Name of the Vulnerable Software and Affected Versions FreeRTOS versions prior to 10.4.3 Description The issue is caused by an integer overflow in the queue.c file of the FreeRTOS kernel, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of...
Amazon FreeRTOS for AWS Input Validation Error Vulnerability
Amazon FreeRTOS is an open source operating system for microcontrollers from Amazon USA. An input validation error vulnerability exists in Amazon FreeRTOS v1.4.8 and earlier versions for AWS. The vulnerability stems from the program not checking the length of prvProcessReceivedPublish. An attacke...
CVE-2019-18178
Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FFClose is defined in fffile.c. The file handler pxFile is freed by ffconfigFREE, which by default is a macro definition of vPortFree, but it is reused to flush modified file content from the cache to disk by the function...
Design/Logic Flaw
Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FFClose is defined in fffile.c. The file handler pxFile is freed by ffconfigFREE, which by default is a macro definition of vPortFree, but it is reused to flush modified file content from the cache to disk by the function...
CVE-2019-18178
Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FFClose is defined in fffile.c. The file handler pxFile is freed by ffconfigFREE, which by default is a macro definition of vPortFree, but it is reused to flush modified file content from the cache to disk by the function...
CVE-2019-18178
The CVE-2019-18178 vulnerability affects Real Time Engineers FreeRTOS+FAT 160919a. It is a use-after-free in the FF_Close() function (ff_file.c). The file handler pxFile is freed by ffconfigFREE, which is a macro for vPortFree(), but that same path is reused to flush modified file content from th...
PT-2019-15257
Name of the Vulnerable Software and Affected Versions Real Time Engineers FreeRTOS+FAT version 160919a Description The issue is related to a use after free error. The function FF Close is defined in the file ff file.c. The file handler pxFile is freed by ffconfigFREE, which by default is a macro...
CVE-2019-18178: Use After Free
Real Time Engineers FreeRTOS+FAT 160919a has a use after free. The function FFClose is defined in fffile.c. The file handler pxFile is freed by ffconfigFREE, which by default is a macro definition of vPortFree, but it is reused to flush modified file content from the cache to disk by the function...
CVE-2019-13120
Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which...
CVE-2019-13120
Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which...
Security feature bypass
Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which...
CVE-2019-13120
Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which...
CVE-2019-13120
CVE-2019-13120 affects Amazon FreeRTOS up to v1.4.8. The vulnerability arises from insufficient length checking in prvProcessReceivedPublish, which can cause untargetable leakage of arbitrary memory on a device when an attacker sends a malformed MQTT publish to an Amazon IoT Thing interacting wit...
PT-2019-13136 · Amazon · Amazon Freertos
Name of the Vulnerable Software and Affected Versions: Amazon FreeRTOS versions up to and including 1.4.8 Description: The issue is related to a lack of length checking in the prvProcessReceivedPublish function, which can lead to the untargetable leakage of arbitrary memory contents on a device t...
CVE-2019-13120: Out-of-bounds Read
Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which...
CVE-2018-16522
creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...
CVE-2018-16525
creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...
CVE-2018-16524
creationtimestamp| type| source ---|---|--- 2018-12-31 09:38:19+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-freertos-kayttojarjestelmissa...