CVE-2018-16526: Buffer Overflow
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to leak information or execute arbitrary code because of a Buffer Overflow during generation of a protocol checksum in usGenerateProtocolChecksum and prvProcessIPPacket.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-16526?
CVE-2018-16526 is a vulnerability in Amazon Web Services (AWS) FreeRTOS up to version 1.3.1 and FreeRTOS up to version 10.0.1 that allows remote attackers to leak information or execute arbitrary code due to a buffer overflow during the generation of a protocol checksum.
How severe is CVE-2018-16526?
CVE-2018-16526 has a severity rating of 8.1 (high).
Which software versions are affected by CVE-2018-16526?
CVE-2018-16526 affects Amazon Web Services (AWS) FreeRTOS up to version 1.3.1 and FreeRTOS up to version 10.0.1.
How can CVE-2018-16526 be exploited?
CVE-2018-16526 can be exploited by remote attackers to leak information or execute arbitrary code by causing a buffer overflow during the generation of a protocol checksum.
Is there a fix for CVE-2018-16526?
Yes, updating to a version of Amazon FreeRTOS that is not affected by this vulnerability is recommended to mitigate CVE-2018-16526.