CVE-2021-43268: Double Free
First published: Wed Nov 24 2021(Updated: )
An issue was discovered in VxWorks 6.9 through 7. In the IKE component, a specifically crafted packet may lead to reading beyond the end of a buffer, or a double free.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Windriver Vxworks | >=6.9<=7.0 | |
| >=6.9<=7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2021-43268.
What is the severity rating of CVE-2021-43268?
CVE-2021-43268 has a severity rating of 6.5, which is considered medium.
What software versions are affected by CVE-2021-43268?
VxWorks versions 6.9 through 7 are affected by CVE-2021-43268.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for CVE-2021-43268 is CWE-415.
How can the vulnerability be exploited?
The vulnerability can be exploited by sending a specifically crafted packet in the IKE component of VxWorks, which may lead to reading beyond the end of a buffer or a double free.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/first-publish-date
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/windriver
- canonical/windriver vxworks
- version/windriver vxworks/6.9
- version/windriver vxworks/7.0