CVE-2020-35198: Integer Overflow

Q: What is CVE-2020-35198?

CVE-2020-35198 is a vulnerability in Wind River VxWorks 7 that could allow an attacker to cause memory corruption.

Q: What is the severity of CVE-2020-35198?

The severity of CVE-2020-35198 is critical, with a CVSS score of 9.8.

Q: How does CVE-2020-35198 affect Wind River VxWorks?

CVE-2020-35198 affects Wind River VxWorks 7 versions 6.9 to 6.9.4.12 and 7.0 to 21.03.

Q: How can an attacker exploit CVE-2020-35198?

An attacker can exploit CVE-2020-35198 by crafting a malicious input that triggers an integer overflow in the memory allocator, leading to memory corruption.

Q: Is there a fix available for CVE-2020-35198?

Yes, Wind River has released patches to address CVE-2020-35198. It is recommended to update to the latest version of VxWorks 7 as soon as possible.

Published May 12, 2021

Updated

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

Affected Software

37 affected components

Windriver Vxworks>=6.9<6.9.4.12

Windriver Vxworks>=7.0<21.03

Windriver Vxworks=6.9.4.12

Windriver Vxworks=6.9.4.12-rolling_cumulative_patch_layer1

Windriver Vxworks=6.9.4.12-rolling_cumulative_patch_layer2

Oracle Communications Eagle>=46.8.0<=46.8.2

Oracle Communications Eagle>=46.9.1<=46.9.3

Oracle Communications Eagle=46.7.0

Multiple Amazon FreeRTOS, Version 10.4.1

Multiple Apache Nuttx OS, Version 9.1.0

Multiple ARM CMSIS-RTOS2, versions prior to 2.1.3

Multiple ARM Mbed OS, Version 6.3.0

Multiple ARM mbed-ualloc, Version 1.3.0

Multiple BlackBerry QNX SDP Versions 6.5.0 SP1 and earlier

Multiple BlackBerry QNX OS for Safety Versions 1.0.1 and earlier safety products compliant with IEC 61508 and/or ISO 26262

Multiple BlackBerry QNX OS for Medical Versions 1.1 and earlier safety products compliant with IEC 62304 A full list of affected QNX products and versions is available here

Multiple A full list of affected QNX products and versions is available here

Multiple Cesanta Software Mongoose OS, v2.17.0

Multiple eCosCentric eCosPro RTOS, Versions 2.0.1 through 4.5.3

Multiple Google Cloud IoT Device SDK, Version 1.0.2

Multiple Media Tek LinkIt SDK, versions prior to 4.6.1

Multiple Micrium OS, Versions 5.10.1 and prior

Multiple Micrium uC/OS: uC/LIB Versions 1.38.xx, Version 1.39.00

Multiple NXP MCUXpresso SDK, versions prior to 2.8.2

Multiple NXP MQX, Versions 5.1 and prior

Multiple Redhat newlib, versions prior to 4.0.0

Multiple RIOT OS, Version 2020.01.1

Multiple Samsung Tizen RT RTOS, versions prior 3.0.GBB

Multiple TencentOS-tiny, Version 3.1.0

Multiple Texas Instruments CC32XX, versions prior to 4.40.00.07

Multiple Texas Instruments SimpleLink MSP432E4XX

Multiple Texas Instruments SimpleLink-CC13XX, versions prior to 4.40.00

Multiple Texas Instruments SimpleLink-CC26XX, versions prior to 4.40.00

Multiple Texas Instruments SimpleLink-CC32XX, versions prior to 4.10.03

Multiple Uclibc-NG, versions prior to 1.0.36

Multiple Windriver VxWorks, prior to 7.0

Multiple Zephyr Project RTOS, versions prior to 2.5

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuapr2022.html

Event History

May 12, 2021

CVE Published

via MITRE·10:55 AM

Data Sourced

via MITRE·10:55 AM

Description

Frequently Asked Questions

What is CVE-2020-35198?

CVE-2020-35198 is a vulnerability in Wind River VxWorks 7 that could allow an attacker to cause memory corruption.

What is the severity of CVE-2020-35198?

The severity of CVE-2020-35198 is critical, with a CVSS score of 9.8.

How does CVE-2020-35198 affect Wind River VxWorks?