An issue was discovered in Wind River VxWorks 6.9 and 7, that allows a specifically crafted packet sent by a Radius server, may cause Denial of Service during the IP Radius access procedure.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vxworks | Windriver | 6.9 (including) | 6.9.4.12 (excluding) |
| Vxworks | Windriver | 6.9.4.12 (including) | 6.9.4.12 (including) |
| Vxworks | Windriver | 6.9.4.12-rolling_cumulative_patch_layer1 (including) | 6.9.4.12-rolling_cumulative_patch_layer1 (including) |
| Vxworks | Windriver | 6.9.4.12-rolling_cumulative_patch_layer2 (including) | 6.9.4.12-rolling_cumulative_patch_layer2 (including) |
| Vxworks | Windriver | 6.9.4.12-rolling_cumulative_patch_layer3 (including) | 6.9.4.12-rolling_cumulative_patch_layer3 (including) |
| Vxworks | Windriver | 6.9.4.12-rolling_cumulative_patch_layer4 (including) | 6.9.4.12-rolling_cumulative_patch_layer4 (including) |
| Vxworks | Windriver | 6.9.4.12-rolling_cumulative_patch_layer5 (including) | 6.9.4.12-rolling_cumulative_patch_layer5 (including) |
| Vxworks | Windriver | 7.0 (including) | 7.0 (including) |
References
- https://support2.windriver.com/index.php?page=cve\u0026on=view\u0026id=CVE-2022-38767
- https://windriver.com
- https://support2.windriver.com/index.php?page=cve\u0026on=view\u0026id=CVE-2022-38767
- https://windriver.com