Vxworks vulnerabilities

2 known vulnerabilities in Vxworks from Windriver. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  vxworks: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-51787Feb 15, 2024Windriver

  An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not freed, resulting in a memory leak.

• 8.8 High severity

  vxworks: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-38346Sep 22, 2023WindriverEPSS 1.54%

  An issue was discovered in Wind River VxWorks 6.9 and 7. The function ``tarExtract`` implements TAR file extraction and thereby also processes files within an archive that have relative or absolute file paths. A developer using the "tarExtract" function may ex