CVE-2019-7714 - An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4

Back Back to CVE browser

CRITICAL

An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4

Published Mar 26, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 2.13%

Description

An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication header. However, when copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-17246
Advisory
https://github.com/bl4ckic3/GHS-Bugs
x_refsource_MISCExploitThird Party Advisory
https://www.ghs.com/products/rtos/integrity.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-17246		Advisory
https://github.com/bl4ckic3/GHS-Bugs		x_refsource_MISCExploitThird Party Advisory
https://www.ghs.com/products/rtos/integrity.html		x_refsource_MISCVendor Advisory