CVE-2019-12257
high · 8.8Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.
8.8
CVSS
84.2%
EPSS (exploit prob.)
100th
EPSS percentile
2019-08-09
Published
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| windriver | vxworks | >= 6.5, < 6.9.4 |
| sonicwall | sonicos | >= 5.9.0.0, <= 5.9.0.7 |
| sonicwall | sonicos | >= 5.9.1.0., <= 5.9.1.12 |
| sonicwall | sonicos | >= 6.2.0.0, <= 6.2.3.1 |
| sonicwall | sonicos | >= 6.2.4.0, <= 6.2.4.3 |
| sonicwall | sonicos | >= 6.2.5.0, <= 6.2.5.3 |
| sonicwall | sonicos | >= 6.2.6.0, <= 6.2.6.1 |
| sonicwall | sonicos | >= 6.2.7.0, <= 6.2.7.4 |
| sonicwall | sonicos | >= 6.2.9.0, <= 6.2.9.2 |
| sonicwall | sonicos | >= 6.5.0.0, <= 6.5.0.3 |
| sonicwall | sonicos | >= 6.5.1.0, <= 6.5.1.4 |
| sonicwall | sonicos | >= 6.5.2.0, <= 6.5.2.3 |
| sonicwall | sonicos | >= 6.5.3.0, <= 6.5.3.3 |
| sonicwall | sonicos | >= 6.5.4.0., <= 6.5.4.3 |
| sonicwall | sonicos | 6.2.7.0 |
| sonicwall | sonicos | 6.2.7.1 |
| sonicwall | sonicos | 6.2.7.7 |
| siemens | siprotec_5_firmware | < 7.59 |
| siemens | siprotec_5 | all versions |
| netapp | e-series_santricity_os_controller | >= 8.00, <= 8.40.50.00 |
| siemens | siprotec_5_firmware | < 7.91 |
| siemens | siprotec_5 | all versions |
| siemens | ruggedcom_win7000_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7000 | all versions |
| siemens | ruggedcom_win7018_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7018 | all versions |
| siemens | ruggedcom_win7025_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7025 | all versions |
| siemens | ruggedcom_win7200_firmware | < bs5.2.461.17 |
| siemens | ruggedcom_win7200 | all versions |
| belden | hirschmann_hios | <= 07.0.07 |
| belden | hirschmann_ees20 | all versions |
| belden | hirschmann_ees25 | all versions |
| belden | hirschmann_eesx20 | all versions |
| belden | hirschmann_eesx30 | all versions |
| belden | hirschmann_grs1020 | all versions |
| belden | hirschmann_grs1030 | all versions |
| belden | hirschmann_grs1042 | all versions |
| belden | hirschmann_grs1120 | all versions |
| belden | hirschmann_grs1130 | all versions |
Check a specific version with /api/v1/cve/match.
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
- https://security.netapp.com/advisory/ntap-20190802-0001/
- https://support.f5.com/csp/article/K41190253
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12257
- https://support2.windriver.com/index.php?page=security-notices
- https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
- https://cert-portal.siemens.com/productcert/pdf/ssa-189842.pdf
- https://cert-portal.siemens.com/productcert/pdf/ssa-632562.pdf
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0009
- https://security.netapp.com/advisory/ntap-20190802-0001/
- https://support.f5.com/csp/article/K41190253
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2019-12257
- https://support2.windriver.com/index.php?page=security-notices
- https://www.windriver.com/security/announcements/tcp-ip-network-stack-ipnet-urgent11/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-12257