CVE-2019-12255

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.

• windriver vxworks (>= 6.5 < 6.9.4) • netapp e-series santricity os controller (>= 8.00 <= 8.40.50.00) • sonicwall sonicos (>= 5.9.0.0 <= 5.9.0.7) • sonicwall sonicos (>= 5.9.1.0. <= 5.9.1.12) • sonicwall sonicos (>= 6.2.0.0 <= 6.2.3.1) • sonicwall sonicos (>= 6.2.4.0 <= 6.2.4.3) • sonicwall sonicos (>= 6.2.5.0 <= 6.2.5.3) • sonicwall sonicos (>= 6.2.6.0 <= 6.2.6.1) • sonicwall sonicos (>= 6.2.7.0 <= 6.2.7.4) • sonicwall sonicos (>= 6.2.9.0 <= 6.2.9.2) • sonicwall sonicos (>= 6.5.0.0 <= 6.5.0.3) • sonicwall sonicos (>= 6.5.1.0 <= 6.5.1.4) • sonicwall sonicos (>= 6.5.2.0 <= 6.5.2.3) • sonicwall sonicos (>= 6.5.3.0 <= 6.5.3.3) • sonicwall sonicos (>= 6.5.4.0. <= 6.5.4.3) • sonicwall sonicos 6.2.7.0 • sonicwall sonicos 6.2.7.1 • sonicwall sonicos 6.2.7.7 • siemens siprotec 5 firmware (< 7.91) • siemens siprotec 5 firmware • siemens power meter 9410 firmware (< 2.2.1) • siemens power meter 9810 firmware • siemens ruggedcom win7000 firmware (< bs5.2.461.17) • siemens ruggedcom win7018 firmware (< bs5.2.461.17) • siemens ruggedcom win7025 firmware (< bs5.2.461.17) • siemens ruggedcom win7200 firmware (< bs5.2.461.17) • belden hirschmann hios (<= 07.0.07) • belden hirschmann hios (<= 07.5.01) • belden hirschmann hios (<= 07.2.04) • belden hirschmann hios (<= 05.3.06) • belden garrettcom magnum dx940e firmware (<= 1.0.1 y7)