Out of Bounds Memory Access in AWS FreeRTOS and WITTENSTEIN WHIS Connect
CVE-2018-16602

5.9MEDIUM

Key Information:

Vendor: Amazon
Status: Amazon Web Services Freertos; Freertos
Vendor: CVE Published:; 6 December 2018

What is CVE-2018-16602?

A vulnerability in Amazon Web Services (AWS) FreeRTOS and WITTENSTEIN WHIS Connect has been identified, where out of bounds memory access occurs during the parsing of DHCP responses in the prvProcessDHCPReplies function. This issue allows for potential information disclosure, making it a concern for devices utilizing these software solutions. The problem is present in AWS FreeRTOS versions up to 1.3.1 and FreeRTOS up to V10.0.1 that includes FreeRTOS+TCP functionality, as well as within the WITTENSTEIN WHIS Connect middleware. Users are advised to review updates and patch their systems accordingly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch