CVE-2023-51787

2024-02-1500:00:00

mitre

github.com

cve-2023-51787

wind river

vxworks

openssl

memory leak

security issue

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not freed, resulting in a memory leak.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*"
    ],
    "vendor": "windriver",
    "product": "vxworks",
    "versions": [
      {
        "status": "affected",
        "version": "7_22.09"
      },
      {
        "status": "affected",
        "version": "23.03"
      }
    ],
    "defaultStatus": "unknown"
  }
]