CVE-2019-12259

Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.

• windriver vxworks (>= 6.5 < 6.9.4.12) • windriver vxworks 7.0 • sonicwall sonicos (>= 5.9.0.0 <= 5.9.0.7) • sonicwall sonicos (>= 5.9.1.0. <= 5.9.1.12) • sonicwall sonicos (>= 6.2.0.0 <= 6.2.3.1) • sonicwall sonicos (>= 6.2.4.0 <= 6.2.4.3) • sonicwall sonicos (>= 6.2.5.0 <= 6.2.5.3) • sonicwall sonicos (>= 6.2.6.0 <= 6.2.6.1) • sonicwall sonicos (>= 6.2.7.0 <= 6.2.7.4) • sonicwall sonicos (>= 6.2.9.0 <= 6.2.9.2) • sonicwall sonicos (>= 6.5.0.0 <= 6.5.0.3) • sonicwall sonicos (>= 6.5.1.0 <= 6.5.1.4) • sonicwall sonicos (>= 6.5.2.0 <= 6.5.2.3) • sonicwall sonicos (>= 6.5.3.0 <= 6.5.3.3) • sonicwall sonicos (>= 6.5.4.0. <= 6.5.4.3) • sonicwall sonicos 6.2.7.0 • sonicwall sonicos 6.2.7.1 • sonicwall sonicos 6.2.7.7 • siemens siprotec 5 firmware (< 7.59) • siemens siprotec 5 firmware (< 7.91) • siemens ruggedcom win7000 firmware (< bs5.2.461.17) • siemens ruggedcom win7200 firmware (< bs5.2.461.17) • siemens ruggedcom win7025 firmware (< bs5.2.461.17) • siemens ruggedcom win7018 firmware (< bs5.2.461.17) • siemens 9410 power meter firmware (< 2.2.1) • siemens 9810 power meter firmware (< 2.2.1) • belden hirschmann hios (<= 07.0.07) • belden hirschmann hios (<= 07.5.01) • belden hirschmann hios (<= 07.2.04) • belden hirschmann hios (<= 05.3.06) • belden garrettcom magnum dx940e firmware (<= 1.0.1 y7)