570 matches found
CVE-2021-29998
An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client...
CVE-2021-29998
CVE-2021-29998 affects Wind River VxWorks before 6.5 due to a heap-based overflow in the DHCP client. Impact ranges from DoS to potential remote code execution (per ICS advisories). Affected products include Wind River VxWorks-based industrial systems. Mitigations from ICS/CISA advisories include...
Wind River VxWorks 缓冲区错误漏洞
Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A security vulnerability exists in Wind River VxWorks version 6.8 that could lead to a dhcp server stack overflow...
Wind River VxWorks 缓冲区错误漏洞
Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A buffer error vulnerability exists in Wind River VxWorks versions prior to 6.5 that stems from a possible heap overflow in the dhcp client...
PT-2021-7238 · Siemens +1 · Scalance +2
Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions prior to 6.5 Description: The issue is related to a possible heap overflow in the DHCP client of Wind River VxWorks. This could allow a remote attacker to execute arbitrary code. The vulnerability is also present i...
CVE-2016-20009
A DNS client stack-based buffer overflow in ipdnscdecodename affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
Stack overflow
A DNS client stack-based buffer overflow in ipdnscdecodename affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2016-20009
A DNS client stack-based buffer overflow in ipdnscdecodename affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2016-20009
Vulnerability: Wind River VxWorks 6.5–7 is affected by a DNS client stack-based buffer overflow in ipdnsc_decode_name(). The Red Hat/NVD-derived entries, CNVD, PRION, and PT Security notes confirm the issue affects Wind River VxWorks versions 6.5 through 7 and describe an out-of-bounds write in t...
Wind River VxWorks 缓冲区错误漏洞
Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. A buffer overflow vulnerability exists in Wind River VxWorks versions 6.5 through 7, which can be exploited by a remote attacker to submit a...
PT-2021-8423 · Wind River · Vxworks
Name of the Vulnerable Software and Affected Versions: Wind River VxWorks versions 6.5 through 7 Description: A DNS client stack-based buffer overflow in the ipdnsc decode name function affects the software. This issue only affects products that are no longer supported by the maintainer...
Vulnerability fixed in VxWorks
In Wind River VxWorks, the memory allocator has a possible overflow when calculating the size of the memory block that should be allocated by calloc. The result is that the actual allocated memory is smaller than the buffer size specified by the arguments, leading to memory corruption. The...
CVE-2020-28895
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...
CVE-2020-28895
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...
Memory corruption
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc. As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption...
Wind River VxWorks Input Validation Error Vulnerability
Wind River VxWorks is an embedded real-time operating system RTOS from Wind River Systems USA. Wind River VxWorks suffers from an input validation error vulnerability that originates from memory corruption when the actual memory allocated is smaller than the buffer size specified by a parameter...
GHSA-7G8M-5QH9-9PGW Directory Traversal in wind-mvc
Affected versions of wind-mvc resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...
Directory Traversal in wind-mvc
Affected versions of wind-mvc resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...
wind-info.com Cross Site Scripting vulnerability OBB-1293286
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...