CVE-2019-12257

HOCH 8.8CVE-2019-12257 · Published 09/08/2019 · updated 17/06/2026

Kurz gesagt

CVE-2019-12257 ist eine Schwachstelle (HOCH (CVSS 8.8)).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 84.3%, höher als bei 99.7% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.

References

cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf · Third Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf · Third Party Advisory
psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 · Third Party Advisory
security.netapp.com/advisory/ntap-20190802-0001 · Third Party Advisory
support.f5.com/csp/article/K41190253 · Third Party Advisory
support2.windriver.com/index.php · Vendor Advisory
support2.windriver.com/index.php · Issue Tracking
windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free