CVE-2019-12255: Buffer Overflow
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12255?
CVE-2019-12255 has a severity rating that indicates a significant risk of exploitation due to the buffer overflow vulnerability in the Wind River VxWorks TCP component.
How do I fix CVE-2019-12255?
To fix CVE-2019-12255, update to the latest patched version of the affected software, following vendor recommendations.
What systems are affected by CVE-2019-12255?
CVE-2019-12255 affects Wind River VxWorks versions from 6.5 to 6.9.4, as well as specific versions of NetApp E-Series SANtricity OS and SonicWall SonicOS.
What can happen if CVE-2019-12255 is successfully exploited?
If CVE-2019-12255 is exploited, it can lead to denial of service or potential code execution due to the buffer overflow.
Are there any workarounds for CVE-2019-12255?
Currently, the best approach to mitigate CVE-2019-12255 is to apply the necessary patch from the vendor rather than relying on workarounds.