CVE:CVE-2020-28895
CNNVD:CNNVD-202102-301
Wind River VxWorks是美国风河系统（Wind River）公司的一套嵌入式实时操作系统（RTOS）。
Wind River VxWorks 存在输入验证错误漏洞，该漏洞源于实际分配的内存小于参数指定的缓冲区大小，导致内存损坏。
solution:Upgrade windriver vxworks to a higher version than 6.9.4.12,6.9.4.12,6.9.4.12:rolling_cumulative_patch_layer1,and avoid the version [6.9,6.9.4.12),6.9.4.12,6.9.4.12:rolling_cumulative_patch_layer1; Upgrade oracle communications_eagle to a higher version than 48.6.2,46.9.3,46.7.0,and avoid the version [46.8.0,48.6.2],[46.9.1,46.9.3],46.7.0