CVE-2019-12261: Buffer Overflow
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-12261?
CVE-2019-12261 has a high severity rating due to the potential for a buffer overflow that can lead to remote code execution.
How do I fix CVE-2019-12261?
To mitigate CVE-2019-12261, users should apply the latest security patches provided by Wind River and affected vendors promptly.
What systems are affected by CVE-2019-12261?
CVE-2019-12261 affects Wind River VxWorks versions 6.7 to 6.9, vx7, and specific versions of SonicWall SonicOS and Siemens firmware.
What type of vulnerability is CVE-2019-12261?
CVE-2019-12261 is a buffer overflow vulnerability in the TCP component of Wind River VxWorks.
Can CVE-2019-12261 be exploited remotely?
Yes, CVE-2019-12261 can be exploited remotely during the connect() process to a vulnerable host.