CVEブラウザに戻る

CVE-2019-7714

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1070%

EPSS Percentile35.67th

Published2019年3月26日

Last Modified2024年11月21日

Vulnerability Description

An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication header. However, when copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.

Affected Platforms (CPE)

💻

Ghs

Integrity Rtos

= 5.0.4

References & Advisories

🔗 https://github.com/bl4ckic3/GHS-Bugs

🔗 https://www.ghs.com/products/rtos/integrity.html

🔗 https://github.com/bl4ckic3/GHS-Bugs

🔗 https://www.ghs.com/products/rtos/integrity.html

関連する脆弱性情報

CVE-2019-77139.8

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffe...

CVE-2019-77117.5

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented shell comm...

CVE-2019-77127.5

An issue was discovered in handler_ipcom_shell_pwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. ...

CVE-2019-77157.5

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler func...