VxWorks 7 Memory Leak Vulnerability Affects OpenSSL Tasks and POSIX Threads
CVE-2023-51787

7.5HIGH

Key Information:

Vendor

Wind River

Status
VxWorks 7
Vendor
CVE Published:
15 February 2024

What is CVE-2023-51787?

A memory leak has been identified in Wind River's VxWorks 7 versions 22.09 and 23.03, triggered when a VxWorks task or POSIX thread utilizing OpenSSL exits, leading to unfreed per-task memory. This issue poses a risk of exhausting available memory over time, impacting system performance and reliability.

References

https://support2.windriver.com/index.php?page=cve&on=view...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.