ZeroHour

CVE-2019-7714

PoC
CVSS 3.0
9.8 critical
EPSS
2%p81
Published
()
Modified
Description

An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication header. However, when copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.

Vendors
ghs
Products
integrity rtos
Weakness
CWE-787
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.