Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.
Search vulnerabilities
CVE-2019-12258
CVSS 3.1 · 7.5 High
EPSS 22.9%
KEV · Not listed
Vendors
Products
CVE-2019-12257
Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.
CVSS 3.1 · 8.8 High
EPSS 84.3%
KEV · Not listed
Vendors
Products
CVE-2019-12256
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options.
CVSS 3.1 · 9.8 Critical
EPSS 26.8%
KEV · Not listed
Vendors
Products
CVE-2019-12255
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
CVSS 3.1 · 9.8 Critical
EPSS 75.2%
KEV · Not listed
Vendors
Products
CVE-2016-20009
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS 3.1 · 9.8 Critical
EPSS 1.9%
KEV · Not listed
Vendors
Products