Skip to content
OpenAdvisories

Product · Eclipse Foundation

ThreadX

13 known vulnerabilities.

6 results · Clear filters · Feed

  • Medium 5.7

    Missing check for thread priority

    In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of that maximum priority wasn't performed, allowing, as a result, to obtain a thread with higher priority than expected and causing a possibl…

  • Medium 5.7

    Incomplete validation of kernel object pointers in system calls

    In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a reserved or unmapped memory region. Vulnerable system calls had a check of pointers, but that check wasn't verifying whether the pointer is …

  • Medium 5.3

    Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow

    In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length in one packet smal…

  • Medium 5.3

    Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow

    In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length smal…

  • Medium 5.3

    Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow

    In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length in one packet smal…

  • Medium 5.3

    Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow

    In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length smaller than the d…