ZeroHour

CVE-2016-20009

PoC
CVSS 3.1
9.8 critical
EPSS
2%p78
Published
()
Modified
Description

A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Vendors
windriversiemens
Products
vxworks, sgt-100 firmware, sgt-200 firmware, sgt-300 firmware, sgt-400 firmware, sgt-a20 firmware, sgt-a35 firmware, sgt-a65 firmware
Weakness
CWE-787
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news