CVE-2019-12256

CRÍTICO 9.8CVE-2019-12256 · Published 09/08/2019 · updated 17/06/2026

Em resumo

CVE-2019-12256 é uma vulnerabilidade CRÍTICO (CVSS 9.8).
Chance de exploração nos próximos 30 dias (EPSS): 26.8%, maior que 98.0% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options.

References

cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf · Third Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-352504.pdf · Third Party Advisory
cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf · Third Party Advisory
psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009 · Third Party Advisory
security.netapp.com/advisory/ntap-20190802-0001 · Third Party Advisory
support.f5.com/csp/article/K41190253 · Third Party Advisory
support2.windriver.com/index.php · Vendor Advisory
support2.windriver.com/index.php · Issue Tracking
windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free