CVE-2018-16598: Unintended Proxy or Intermediary

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a...

PT-2018-13637

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to V10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows any received DNS response to be accepted...

CVE-2018-16525: Undefined Security Weakness

Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in...

PT-2018-13613

Name of the Vulnerable Software and Affected Versions Amazon Web Services AWS FreeRTOS versions through 1.3.1 FreeRTOS versions up to 10.0.1 WITTENSTEIN WHIS Connect middleware TCP/IP component affected versions not specified Description The issue allows remote attackers to execute arbitrary code...