CVEs (38)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not freed, resulting in a memory leak. |
An issue was discovered in Wind River VxWorks 6.9 and 7. The function ``tarExtract`` implements TAR file extraction and thereby also processes files within an archive that have relative or absolute file paths. A develope...Show more |
An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure. |
In Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read during an IKE initial exchange scenario. |
An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free. |
2Oracle Windriver2Communications Eagle VxworksNov 21, 2024 May 12, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller...Show more |
An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server. |
2Siemens Windriver36Ruggedcom Win Subscriber Station Firmware Scalance X200 4 P Irt FirmwareScalance X201 3p Irt Firmware+33 moreNov 21, 2024 Apr 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client. |
An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE. |
2Siemens Windriver8Sgt 100 Firmware Sgt 200 FirmwareSgt 300 Firmware+5 moreNov 21, 2024 Mar 11, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer |
2Oracle Windriver2Communications Eagle VxworksNov 21, 2024 Feb 3, 2021 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by th...Show more |
httpRpmFs in WebCLI in Wind River VxWorks 5.5 through 7 SR0640 has no check for an escape from the web root. |
The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference. |
3Belden SiemensWindriver7Garrettcom Magnum Dx940e Firmware Hirschmann HiosRuggedcom Win7000 Firmware+4 moreNov 21, 2024 Aug 14, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw). |
6Belden NetappOracle+3 more13Communications Eagle E Series Santricity Os ControllerGarrettcom Magnum Dx940e Firmware+10 moreNov 21, 2024 Aug 9, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host. |
6Belden NetappOracle+3 more13Communications Eagle E Series Santricity Os ControllerGarrettcom Magnum Dx940e Firmware+10 moreNov 21, 2024 Aug 9, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option. |
5Belden NetappSiemens+2 more12E Series Santricity Os Controller Garrettcom Magnum Dx940e FirmwareHirschmann Hios+9 moreNov 21, 2024 Aug 9, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options. |
5Belden NetappSiemens+2 more12E Series Santricity Os Controller Garrettcom Magnum Dx940e FirmwareHirschmann Hios+9 moreNov 21, 2024 Aug 9, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. |
5Belden NetappSiemens+2 more12E Series Santricity Os Controller Garrettcom Magnum Dx940e FirmwareHirschmann Hios+9 moreNov 21, 2024 Aug 9, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report. |
5Belden NetappSiemens+2 more12E Series Santricity Os Controller Garrettcom Magnum Dx940e FirmwareHirschmann Hios+9 moreNov 21, 2024 Aug 9, 2019 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition. |