CVE:CVE-2019-12257
CNNVD:CNNVD-201907-1498
Wind River Systems VxWorks是美国风河系统（Wind River Systems）公司的一套嵌入式实时操作系统（RTOS）。
Wind River Systems VxWorks中的ipdhcpc的DHCP Offer/ACK解析存在缓冲区错误漏洞。攻击者可利用该漏洞覆盖堆，执行代码。以下产品及版本受到影响：Wind River Systems VxWorks 6.9版本，6.8版本，6.7版本，6.6版本。
solution:Upgrade windriver vxworks to a higher version than 6.9.4,and avoid the version [6.5,6.9.4); Upgrade sonicwall sonicos to a higher version than 5.9.0.7,5.9.1.12,6.2.3.1,6.2.4.3,6.2.5.3,6.2.6.1,6.2.7.4,6.2.9.2,6.5.0.3,6.5.1.4,6.5.2.3,6.5.3.3,6.5.4.3,6.2.7.0,6.2.7.1,6.2.7.7,and avoid the version [5.9.0.0,5.9.0.7],[5.9.1.0.,5.9.1.12],[6.2.0.0,6.2.3.1],[6.2.4.0,6.2.4.3],[6.2.5.0,6.2.5.3],[6.2.6.0,6.2.6.1],[6.2.7.0,6.2.7.4],[6.2.9.0,6.2.9.2],[6.5.0.0,6.5.0.3],[6.5.1.0,6.5.1.4],[6.5.2.0,6.5.2.3],[6.5.3.0,6.5.3.3],[6.5.4.0.,6.5.4.3],6.2.7.0,6.2.7.1,6.2.7.7; Upgrade siemens siprotec_5_firmware to a higher version than 7.59,7.91,and avoid the version (,7.59),(,7.91); Upgrade netapp e-series_santricity_os_controller to a higher version than 8.40.50.00,and avoid the version [8.00,8.40.50.00]; Upgrade siemens ruggedcom_win7000_firmware to a higher version than bs5.2.461.17,and avoid the version (,bs5.2.461.17); Upgrade siemens ruggedcom_win7018_firmware to a higher version than bs5.2.461.17,and avoid the version (,bs5.2.461.17); Upgrade siemens ruggedcom_win7025_firmware to a higher version than bs5.2.461.17,and avoid the version (,bs5.2.461.17); Upgrade siemens ruggedcom_win7200_firmware to a higher version than bs5.2.461.17,and avoid the version (,bs5.2.461.17); Upgrade belden hirschmann_hios to a higher version than 07.0.07,07.5.01,07.2.04,05.3.06,and avoid the version (,07.0.07],(,07.5.01],(,07.2.04],(,05.3.06]; Upgrade belden garrettcom_magnum_dx940e_firmware to a higher version than 1.0.1_y7,and avoid the version (,1.0.1_y7]