Oracle Communications Eagle vulnerabilities
4 vulnerabilities
Known vulnerabilities in Oracle Communications Eagle, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-28895oraclecommunications_eagle+1
EPSS score1.57%
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.CVE-2020-35198oraclecommunications_eagle+1EPSS score2.49%
An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.CVE-2019-12261beldengarrettcom_magnum_dx940e_firmware+11EPSS score8.97%
Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host.CVE-2019-12260beldengarrettcom_magnum_dx940e_firmware+11EPSS score23.25%
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.