| Package | Affected versions | Patched versions |
|---|---|---|
| amazon web services freertos | ≤ 1.3.1 | |
| freertos | ≤ 10.0.1 |
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any received DNS response is accepted, without confirming it matches a sent DNS request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free