CVE-2019-12255

CRITICO 9.8CVE-2019-12255 · Published 09/08/2019 · updated 17/06/2026

In breve

CVE-2019-12255 è una vulnerabilità CRITICO (CVSS 9.8).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 75.3%, superiore al 99.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.

References

packetstormsecurity.com/files/154022/VxWorks-6.8-Integer-Underflow.html · Exploit
cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf · Third Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf · Third Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf · Third Party Advisory
psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 · Third Party Advisory
security.netapp.com/advisory/ntap-20190802-0001 · Third Party Advisory
support.f5.com/csp/article/K41190253 · Third Party Advisory
support.f5.com/csp/article/K41190253
support2.windriver.com/index.php · Vendor Advisory
support2.windriver.com/index.php · Issue Tracking
windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free