CVE-2018-16525

PoC —

CVSS 3.0

8.1 high

EPSS

4%p91

Published

Dec 6, 2018 (Dec 6, 2018)

Modified

Jun 17, 2026

Description

Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component allow remote attackers to execute arbitrary code or leak information because of a Buffer Overflow during parsing of DNS\LLMNR packets in prvParseDNSReply.

Vendors: amazon
Products: amazon web services freertos, freertos
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.4%)

In the news1 stories

FreeRTOS flaws expose millions of IoT devices to cyber attacks

Security AffairsOct 22, 10:29 UTC · Oct 22, 2018Vulnerability CVE-2018-16522 CVE-2018-16525 CVE-2018-16526+10 CVEs