Servers and applications

CVE-2019-12255

Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.

Severity: Critical 9.8
Published: 9 Aug 2019
Last changed: 17 Jun 2026
Added to UpHeron: 1 Nov 2026
Exploit chance: 75% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources: NVD

Affected software

Software Affected versions

Software	Affected versions
SonicWall SonicOSServers and applications · `cpe:o:sonicwall:sonicos`	From 6.5.4.0. up to 6.5.4.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.2.0 up to 6.5.2.3 From 6.5.1.0 up to 6.5.1.4 All 16 release lines From 5.9.0.0 up to 5.9.0.7 From 5.9.1.0. up to 5.9.1.12 From 6.2.0.0 up to 6.2.3.1 From 6.2.4.0 up to 6.2.4.3 From 6.2.5.0 up to 6.2.5.3 From 6.2.6.0 up to 6.2.6.1 From 6.2.7.0 up to 6.2.7.4 Version 6.2.7.0 Version 6.2.7.1 Version 6.2.7.7 From 6.2.9.0 up to 6.2.9.2 From 6.5.0.0 up to 6.5.0.3 From 6.5.1.0 up to 6.5.1.4 From 6.5.2.0 up to 6.5.2.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.4.0. up to 6.5.4.3

SonicWall SonicOSServers and applications · cpe:o:sonicwall:sonicos

From 6.5.4.0. up to 6.5.4.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.2.0 up to 6.5.2.3
From 6.5.1.0 up to 6.5.1.4

All 16 release lines

From 5.9.0.0 up to 5.9.0.7
From 5.9.1.0. up to 5.9.1.12
From 6.2.0.0 up to 6.2.3.1
From 6.2.4.0 up to 6.2.4.3
From 6.2.5.0 up to 6.2.5.3
From 6.2.6.0 up to 6.2.6.1
From 6.2.7.0 up to 6.2.7.4
Version 6.2.7.0
Version 6.2.7.1
Version 6.2.7.7
From 6.2.9.0 up to 6.2.9.2
From 6.5.0.0 up to 6.5.0.3
From 6.5.1.0 up to 6.5.1.4
From 6.5.2.0 up to 6.5.2.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.4.0. up to 6.5.4.3

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2019-12255
CVE.org https://www.cve.org/CVERecord?id=CVE-2019-12255