CVE-2019-12264

CVE-2019-12264 affects Wind River VxWorks IPNet IP DHCP client (ipdhcpc) and allows Improper Neutralization of Argument Delimiters in a Command (Argument Injection) in IPv4 address assignment. Affected products include VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4 and VxWorks 7. Likely impact is memory/log...

Wind River Systems VxWorks Buffer Overflow Vulnerability (CNVD-2019-25704)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A buffer error vulnerability exists in the DHCP Offer/ACK parsing of ipdhcpc in Wind River Systems VxWorks. An attacker could exploit this vulnerability to overwrite the heap and execute code...