Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4).

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• belden garrettcom magnum dx940e firmwareup to 1.0.1_y7 inclusive
• belden hirschmann hiosup to 07.5.01 inclusive
• belden hirschmann hiosup to 05.3.06 inclusive
• belden hirschmann hiosup to 07.2.04 inclusive
• belden hirschmann hiosup to 07.0.07 inclusive
• netapp e-series santricity os controller8.00 and later · up to 8.40.50.00 inclusive
• oracle communications eagle46.6.0 and later · up to 46.8.2 inclusive
• siemens power meter 9410 firmwarebefore 2.2.1
• siemens power meter 9810 firmwareall versions
• siemens ruggedcom win7000 firmwarebefore bs5.2.461.17
• siemens ruggedcom win7018 firmwarebefore bs5.2.461.17
• siemens ruggedcom win7025 firmwarebefore bs5.2.461.17
• siemens ruggedcom win7200 firmwarebefore bs5.2.461.17
• siemens siprotec 5 firmwarebefore 7.91
• siemens siprotec 5 firmwarebefore 7.59
• sonicwall sonicos6.2.0.0 and later · up to 6.2.3.1 inclusive
• sonicwall sonicos6.2.5.0 and later · up to 6.2.5.3 inclusive
• sonicwall sonicos6.2.6.0 and later · up to 6.2.6.1 inclusive
• sonicwall sonicos6.2.7.0 and later · up to 6.2.7.4 inclusive
• sonicwall sonicos6.2.9.0 and later · up to 6.2.9.2 inclusive

Other highest-scoring records for the same primary product.

• CVE-2019-12255Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4).
  62This week
• CVE-2019-12258Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component.
  60This week
• CVE-2019-12257Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component.
  60This week

Published before and after this one in the same product

• ← EarlierCVE-2019-12265Aug 9, 2019 · Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component.
  39Monitor
• ← EarlierCVE-2019-12260Aug 9, 2019 · Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4).
  46Plan
• Later →CVE-2019-12262Aug 14, 2019 · Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component.
  40Plan

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.