Servers and applications

CVE-2019-12256

Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options.

Severity: Critical 9.8
Published: 9 Aug 2019
Last changed: 17 Jun 2026
Added to UpHeron: 1 Nov 2026
Exploit chance: 27% in the next 30 daysHigher than 98% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources: NVD

Affected software

Software Affected versions

Software	Affected versions
SonicWall SonicOSServers and applications · `cpe:o:sonicwall:sonicos`	From 6.5.4.0. up to 6.5.4.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.2.0 up to 6.5.2.3 From 6.5.1.0 up to 6.5.1.4 All 16 release lines From 5.9.0.0 up to 5.9.0.7 From 5.9.1.0. up to 5.9.1.12 From 6.2.0.0 up to 6.2.3.1 From 6.2.4.0 up to 6.2.4.3 From 6.2.5.0 up to 6.2.5.3 From 6.2.6.0 up to 6.2.6.1 From 6.2.7.0 up to 6.2.7.4 Version 6.2.7.0 Version 6.2.7.1 Version 6.2.7.7 From 6.2.9.0 up to 6.2.9.2 From 6.5.0.0 up to 6.5.0.3 From 6.5.1.0 up to 6.5.1.4 From 6.5.2.0 up to 6.5.2.3 From 6.5.3.0 up to 6.5.3.3 From 6.5.4.0. up to 6.5.4.3

SonicWall SonicOSServers and applications · cpe:o:sonicwall:sonicos

From 6.5.4.0. up to 6.5.4.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.2.0 up to 6.5.2.3
From 6.5.1.0 up to 6.5.1.4

All 16 release lines

From 5.9.0.0 up to 5.9.0.7
From 5.9.1.0. up to 5.9.1.12
From 6.2.0.0 up to 6.2.3.1
From 6.2.4.0 up to 6.2.4.3
From 6.2.5.0 up to 6.2.5.3
From 6.2.6.0 up to 6.2.6.1
From 6.2.7.0 up to 6.2.7.4
Version 6.2.7.0
Version 6.2.7.1
Version 6.2.7.7
From 6.2.9.0 up to 6.2.9.2
From 6.5.0.0 up to 6.5.0.3
From 6.5.1.0 up to 6.5.1.4
From 6.5.2.0 up to 6.5.2.3
From 6.5.3.0 up to 6.5.3.3
From 6.5.4.0. up to 6.5.4.3

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2019-12256
CVE.org https://www.cve.org/CVERecord?id=CVE-2019-12256