CVE-2018-16525: Buffer Overflow
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in prvParseDNSReply.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-16525.
What is the severity of CVE-2018-16525?
The severity of CVE-2018-16525 is high with a CVSS score of 8.1.
What software is affected by CVE-2018-16525?
Amazon Web Services (AWS) FreeRTOS through 1.3.1 and FreeRTOS up to V10.0.1 (with FreeRTOS+TCP) are affected by CVE-2018-16525.
How can remote attackers exploit CVE-2018-16525?
Remote attackers can exploit CVE-2018-16525 by executing arbitrary code or leaking information through a Buffer Overflow during parsing of DNS/LLMNR packets in prvParseDNSR.
Are there any patches or fixes available for CVE-2018-16525?
Yes, patches and fixes are available for CVE-2018-16525. Please refer to the references for more information.