CVE-2019-12256

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options...

Linux kernel ip_metrics_convert Heap Buffer Overflow DoS

The vulnerability of the ipmetricsconvert function in the ipv4 component of the Linux operating system’s kernel is related to the lack of memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2024-5775

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The vulnerability is related to a NULL pointer dereference in the fib validate source function in the Linux kernel's IPv4 component. This issue can be triggered by syzbot in an old tree and...

K41190253: Multiple RTOS vulnerabilities

Security Advisory Description CVE-2019-12255 Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the TCP component issue 1 of 4. This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. CVE-2019-12256 Wind River VxWorks 6.9 and vx7 has a Buffer...

PT-2022-32599

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue concerns data-races around sysctl fib multipath hash policy in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2022-32370

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue concerns data-races around sysctl fib multipath hash fields in the ipv4 component. It was introduced in version v5.14 and fixed in version v5.18.15. The actual impact and attack...

PT-2022-32663

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...

PT-2022-32961

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.207 Description A data-race issue exists around sysctl fib sync mem in the ipv4 component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28821

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v5.16.10 Description A data race issue exists in the ipv4 component of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.6...

CVE-2019-12256

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options...

CVE-2019-12256

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options...

CVE-2019-12256: Buffer Copy without Checking Size of Input

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options...