Wind River Support Network

Home CVE Database CVE-2021-29997

CVE-2021-29997

Description

An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE.

Priority: MEDIUM

CVSS v3: 5.3

Component: No Impact

Publish Date: Apr 13, 2021

Related ID: CVE-2021-29997

CVSS v2: MEDIUM

Modified Date: Apr 16, 2021

Find out more about CVE-2021-29997 from the MITRE-CVE dictionary and NIST NVD

Products Affected

Product Name	Status	Defect	Fixed	Downloads
Linux
Wind River Linux LTS 17	Not Vulnerable	--	--	CVE-2021-29997: An issue was discovered in VxWorks 7 from SR0490 to SR0660, A specially crafted packet may lead to buffer over-read on IKE
Wind River Linux 8	Not Vulnerable	--	--	CVE-2021-29997: An issue was discovered in VxWorks 7 from SR0490 to SR0660, A specially crafted packet may lead to buffer over-read on IKE
Wind River Linux 9	Not Vulnerable	--	--	CVE-2021-29997: An issue was discovered in VxWorks 7 from SR0490 to SR0660, A specially crafted packet may lead to buffer over-read on IKE
Wind River Linux 7	Not Vulnerable	--	--	CVE-2021-29997: An issue was discovered in VxWorks 7 from SR0490 to SR0660, A specially crafted packet may lead to buffer over-read on IKE
Wind River Linux LTS 21	Not Vulnerable	--	--	--
Wind River Linux LTS 22	Not Vulnerable	--	--	--
Wind River Linux LTS 18	Not Vulnerable	--	--	CVE-2021-29997: An issue was discovered in VxWorks 7 from SR0490 to SR0660, A specially crafted packet may lead to buffer over-read on IKE
Wind River Linux LTS 19	Not Vulnerable	--	--	CVE-2021-29997: An issue was discovered in VxWorks 7 from SR0490 to SR0660, A specially crafted packet may lead to buffer over-read on IKE
Wind River Linux CD release	Not Vulnerable	--	--	CVE-2021-29997: An issue was discovered in VxWorks 7 from SR0490 to SR0660, A specially crafted packet may lead to buffer over-read on IKE
Wind River Linux 6	Not Vulnerable	--	--	--
Wind River Linux LTS 23	Not Vulnerable	--	--	--
Wind River Linux LTS 24	Not Vulnerable	--	--	--
VxWorks
VxWorks 7	Fixed	VXHVP-1708	21.03	CVE-2021-29997: An issue was discovered in VxWorks 7 from SR0490 to SR0660, A specially crafted packet may lead to buffer over-read on IKE
VxWorks 6.9	Not Vulnerable	--	--	CVE-2021-29997: An issue was discovered in VxWorks 7 from SR0490 to SR0660, A specially crafted packet may lead to buffer over-read on IKE
Helix Virtualization Platform Cert Edition
Helix Virtualization Platform Cert Edition	Not Vulnerable	--	--	--
eLxr
eLxr 12	Not Vulnerable	--	--	--
Wind River Studio Cloud Platform

Related Products

Product Name	Status	Defect	Fixed	Downloads

Notes
Requires LTSS - customers must have active LTSS (Long Term Security Shield) Support to receive up-to-date information about vulnerabilities that may affect legacy software. Please contact your Wind River account team or see https://docs.windriver.com/bundle/Support_and_Maintenance_Supplemental_Terms_and_Conditions and https://support2.windriver.com/index.php?page=plc for more information.