Wind River VxWorks 6.9.4.12 Rolling Cumulative Patch Layer 1

CPE Details

Wind River VxWorks 6.9.4.12 Rolling Cumulative Patch Layer 1
windriver
vxworks
6.9.4.12
2021-02-04
15h18 +00:00
2021-06-03
17h57 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:windriver:vxworks:6.9.4.12:rolling_cumulative_patch_layer1:*:*:*:*:*:*

Informations

Vendor

windriver

Product

vxworks

Version

6.9.4.12

Update

rolling_cumulative_patch_layer1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-38767 2022-11-24 23h00 +00:00 An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.
7.5
Haute
CVE-2021-43268 2021-11-24 15h15 +00:00 An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free.
6.5
Moyen
CVE-2020-35198 2021-05-12 08h55 +00:00 An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.
9.8
Critique
CVE-2016-20009 2021-03-11 20h39 +00:00 A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
9.8
Critique
CVE-2020-28895 2021-02-03 14h16 +00:00 In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.
7.3
Haute
CVE-2020-11440 2020-07-23 11h59 +00:00 httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root.
7.5
Haute
CVE-2010-2965 2010-08-04 21h00 +00:00 The WDB target agent debug service in Wind River VxWorks 6.x, 5.x, and earlier, as used on the Rockwell Automation 1756-ENBT series A with firmware 3.2.6 and 3.6.1 and other products, allows remote attackers to read or modify arbitrary memory locations, perform function calls, or manage tasks via requests to UDP port 17185, a related issue to CVE-2005-3804.
10