CVE-2018-16603: Infoleak
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an attacker.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16603?
CVE-2018-16603 has been classified with a high severity due to out-of-bounds access that could lead to data leakage.
How do I fix CVE-2018-16603?
To fix CVE-2018-16603, upgrade to AWS FreeRTOS version 1.3.2 or later, or FreeRTOS version 10.0.2 or later.
What types of software are affected by CVE-2018-16603?
CVE-2018-16603 affects AWS FreeRTOS versions up to 1.3.1 and FreeRTOS versions up to 10.0.1 that include the FreeRTOS+TCP component.
What is the potential impact of CVE-2018-16603?
The potential impact of CVE-2018-16603 includes unauthorized data leakage through TCP packet handling.
Is CVE-2018-16603 being actively exploited?
There have been no reported instances of CVE-2018-16603 being actively exploited in the wild, but it is recommended to patch the vulnerability as a precaution.