CVE-2019-12265

Description

Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

Exploitation Probability

12.87

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Wind River VxWorks 6.8	Windows
Multiple Vulnerabilities are affected in Wind River VxWorks 6.5	Windows
Multiple Vulnerabilities are affected in Wind River VxWorks 6.6	Windows
Multiple Vulnerabilities are affected in Wind River VxWorks 6.7	Windows
Vulnerabilities CVE-2015-3963,CVE-2019-12264,CVE-2019-12265 are affected in Wind River VxWorks 6.9.3	Windows
Vulnerabilities CVE-2015-3963,CVE-2019-12263,CVE-2019-12264,CVE-2019-12265 are affected in Wind River VxWorks 6.9.4	Windows
Multiple Vulnerabilities are affected in Wind River VxWorks 7.0	Windows
Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2019-12265)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234