CVE-2019-12261

Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host.

• windriver vxworks (>= 6.5 < 6.9.4.12) • windriver vxworks 7.0 • sonicwall sonicos (>= 5.9.0.0 <= 5.9.0.7) • sonicwall sonicos (>= 5.9.1.0. <= 5.9.1.12) • sonicwall sonicos (>= 6.2.0.0 <= 6.2.3.1) • sonicwall sonicos (>= 6.2.4.0 <= 6.2.4.3) • sonicwall sonicos (>= 6.2.5.0 <= 6.2.5.3) • sonicwall sonicos (>= 6.2.6.0 <= 6.2.6.1) • sonicwall sonicos (>= 6.2.7.0 <= 6.2.7.4) • sonicwall sonicos (>= 6.2.9.0 <= 6.2.9.2) • sonicwall sonicos (>= 6.5.0.0 <= 6.5.0.3) • sonicwall sonicos (>= 6.5.1.0 <= 6.5.1.4) • sonicwall sonicos (>= 6.5.2.0 <= 6.5.2.3) • sonicwall sonicos (>= 6.5.3.0 <= 6.5.3.3) • sonicwall sonicos (>= 6.5.4.0. <= 6.5.4.3) • sonicwall sonicos 6.2.7.0 • sonicwall sonicos 6.2.7.1 • sonicwall sonicos 6.2.7.7 • siemens siprotec 5 firmware (< 7.59) • netapp e-series santricity os controller (>= 8.00 <= 8.40.50.00) • siemens siprotec 5 firmware (< 7.91) • siemens power meter 9410 firmware (< 2.2.1) • siemens power meter 9810 firmware • siemens ruggedcom win7000 firmware (< bs5.2.461.17) • siemens ruggedcom win7018 firmware (< bs5.2.461.17) • siemens ruggedcom win7025 firmware (< bs5.2.461.17) • siemens ruggedcom win7200 firmware (< bs5.2.461.17) • oracle communications eagle (>= 46.6.0 <= 46.8.2) • belden hirschmann hios (<= 07.0.07) • belden hirschmann hios (<= 07.5.01) • belden hirschmann hios (<= 07.2.04) • belden hirschmann hios (<= 05.3.06) • belden garrettcom magnum dx940e firmware (<= 1.0.1 y7)