CRITICAL🇵🇱 Wersja polska

CVE-2016-20009

CVSS 9.8v3.1pub. 2021-03-11upd. 2024-11-21

A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Siemens Sgt 100

    HW
    Siemens
    all versions

  • Siemens Sgt 100 Firmware

    OS
    Siemens
    all versions

  • Siemens Sgt 200

    HW
    Siemens
    all versions

  • Siemens Sgt 200 Firmware

    OS
    Siemens
    all versions

  • Siemens Sgt 300

    HW
    Siemens
    all versions

  • Siemens Sgt 300 Firmware

    OS
    Siemens
    all versions

  • Siemens Sgt 400

    HW
    Siemens
    all versions

  • Siemens Sgt 400 Firmware

    OS
    Siemens
    all versions

  • Siemens Sgt A20

    HW
    Siemens
    all versions

  • Siemens Sgt A20 Firmware

    OS
    Siemens
    all versions

  • Siemens Sgt A35

    HW
    Siemens
    all versions

  • Siemens Sgt A35 Firmware

    OS
    Siemens
    all versions

  • Siemens Sgt A65

    HW
    Siemens
    all versions

  • Siemens Sgt A65 Firmware

    OS
    Siemens
    all versions

  • Windriver Vxworks

    OS
    Windriver
    6.5 – 7.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References

Related vulnerabilities

CVE-2020-35198CRITICAL9.8PL ✓same product

Integer overflow w alokatorze pamięci Wind River VxWorks 7 (calloc)

CVE-2021-29998CRITICAL9.8PL ✓same product

Heap overflow w kliencie DHCP systemu Wind River VxWorks

CVE-2021-29999CRITICAL9.8PL ✓same product

Stack overflow w serwerze DHCP systemu Wind River VxWorks

CVE-2020-10288CRITICAL9.8PL ✓same product

ABB IRC5 — pomijanie uwierzytelnienia na serwerze FTP (port 21)

CVE-2019-12262CRITICAL9.8PL ✓same product

Wind River VxWorks — błąd logiczny w kliencie RARP (nieproszone odpowiedzi)