CVE-2016-20009 A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| windriver vxworks | >= 6.5, <= 7.0 | No fix listed |
| Siemens sgt-100 firmware | All versions | No fix listed |
| Siemens sgt-200 firmware | All versions | No fix listed |
| Siemens sgt-300 firmware | All versions | No fix listed |
| Siemens sgt-400 firmware | All versions | No fix listed |
| Siemens sgt-a20 firmware | All versions | No fix listed |
| Siemens sgt-a35 firmware | All versions | No fix listed |
| Siemens sgt-a65 firmware | All versions | No fix listed |
References
- blog.exodusintel.com exploit third-party-advisory
- cert-portal.siemens.com third-party-advisory