CVE-2019-12257: Buffer Copy without Checking Size of Input

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc...

CVE-2019-12264

CVE-2019-12264 affects Wind River VxWorks IPNet IP DHCP client (ipdhcpc) and allows Improper Neutralization of Argument Delimiters in a Command (Argument Injection) in IPv4 address assignment. Affected products include VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4 and VxWorks 7. Likely impact is memory/log...

CVE-2019-12264: Improper Neutralization of Argument Delimiters in a Command

Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component...

PT-2019-4742

Name of the Vulnerable Software and Affected Versions Wind River VxWorks versions 6.6 through 6.9.4 Wind River VxWorks version 7 Description The issue is related to incorrect access control in IPv4 assignment by the ipdhcpc DHCP client component. This can allow an attacker to impact the integrity...

Wind River Systems VxWorks Buffer Overflow Vulnerability (CNVD-2019-25704)

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A buffer error vulnerability exists in the DHCP Offer/ACK parsing of ipdhcpc in Wind River Systems VxWorks. An attacker could exploit this vulnerability to overwrite the heap and execute code...