'prvProcessICMPPacket' Function Information Disclosure Vulnerability in Multiple Products

AWS FreeRTOS, FreeRTOS, WHIS OpenRTOS and SafeRTOS are all used in microcontroller operating systems.WITTENSTEIN WHIS Connect middleware TCP/IP is a WHIS Connect middleware used in OpenRTOS and SafeRTOS systems. TCP/IP component. An information disclosure vulnerability exists in the...

CVE-2018-16603: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an...

CVE-2018-16600: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Amazon Web Services AWS FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 with FreeRTOS+TCP, and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of ARP packets in eARPProcessPacket can be used for information disclosure...