CVE-2020-28895: integer overflow in calloc
First published: Wed Feb 03 2021(Updated: )
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wind River VxWorks | >=6.9<6.9.4.12 | |
| Wind River VxWorks | =6.9.4.12 | |
| Wind River VxWorks | =6.9.4.12-rolling_cumulative_patch_layer1 | |
| oracle communications eagle | >=46.8.0<=48.6.2 | |
| oracle communications eagle | >=46.9.1<=46.9.3 | |
| oracle communications eagle | =46.7.0 | |
| Amazon FreeRTOS | ||
| Apache NuttX | ||
| ARM CMSIS-RTOS2 | ||
| Arm Mbed OS | ||
| Arm Mbed ualloc | ||
| QNX | ||
| BlackBerry QNX OS for Safety | ||
| BlackBerry QNX OS for Medical | ||
| QNX | ||
| Mongoose OS | ||
| eCosCentric eCosPro RTOS | ||
| Google Cloud IoT Device SDK | ||
| MediaTek LinkIt SDK | ||
| Micrium OS | ||
| Micrium uC/OS | ||
| NXP MCUXpresso SDK | ||
| NXP MQX | ||
| newlib | ||
| RIOT OS | ||
| Samsung Tizen RT | ||
| TencentOS-tiny | ||
| Texas Instruments SimpleLink CC32XX | ||
| Texas Instruments SimpleLink MSP432E4 SDK | ||
| Texas Instruments SimpleLink CC13X2 SDK | ||
| Texas Instruments SimpleLink CC26XX | ||
| Texas Instruments SimpleLink CC32XX | ||
| uClibc | ||
| Wind River VxWorks | ||
| Zephyr Project RTOS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the memory allocator overflow in Wind River VxWorks?
The vulnerability ID is CVE-2020-28895.
What is the severity of CVE-2020-28895?
The severity of CVE-2020-28895 is high with a CVSS score of 7.3.
Which software is affected by CVE-2020-28895?
Wind River VxWorks versions 6.9 to 6.9.4.12, Wind River VxWorks version 6.9.4.12 with rolling cumulative patch layer 1, Oracle Communications Eagle versions 46.7.0 to 48.6.2 are affected by CVE-2020-28895.
What is the impact of the memory allocator overflow vulnerability in Wind River VxWorks?
The vulnerability could lead to memory corruption, potentially causing system instability and unauthorized access to sensitive information.
Is there a fix available for CVE-2020-28895?
Yes, Wind River has released patches and updates to address the vulnerability. It is recommended to apply the latest updates provided by the vendor.
- agent/type
- agent/author
- agent/remedy
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/title
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/ics-cert-advisory
- source/ICS
- alias/CVE-2020-28895
- agent/software-canonical-lookup
- vendor/windriver
- canonical/wind river vxworks
- version/wind river vxworks/6.9
- version/wind river vxworks/6.9.4.12
- version/wind river vxworks/6.9.4.12-rolling_cumulative_patch_layer1
- vendor/oracle
- canonical/oracle communications eagle
- version/oracle communications eagle/46.8.0
- version/oracle communications eagle/48.6.2
- version/oracle communications eagle/46.9.1
- version/oracle communications eagle/46.9.3
- version/oracle communications eagle/46.7.0
- vendor/multiple
- canonical/amazon freertos
- canonical/apache nuttx
- canonical/arm cmsis-rtos2
- canonical/arm mbed os
- canonical/arm mbed ualloc
- canonical/qnx
- canonical/blackberry qnx os for safety
- canonical/blackberry qnx os for medical
- canonical/mongoose os
- canonical/ecoscentric ecospro rtos
- canonical/google cloud iot device sdk
- canonical/mediatek linkit sdk
- canonical/micrium os
- canonical/micrium uc/os
- canonical/nxp mcuxpresso sdk
- canonical/nxp mqx
- canonical/newlib
- canonical/riot os
- canonical/samsung tizen rt
- canonical/tencentos-tiny
- canonical/texas instruments simplelink cc32xx
- canonical/texas instruments simplelink msp432e4 sdk
- canonical/texas instruments simplelink cc13x2 sdk
- canonical/texas instruments simplelink cc26xx
- canonical/uclibc
- canonical/zephyr project rtos