Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Interpeak IPWEBS on Integrity RTOS can overflow memory

CVE-2019-7714 · published 7 years ago
Summary

The web server component Interpeak IPWEBS running on Green Hills Integrity RTOS may copy an HTTP Authentication header without checking its length, which can write past the intended memory area. This could let an attacker cause the program to crash or run unwanted code. Apply the vendor’s update or patch that adds proper length checks to the header handling.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ghs integrity_rtos 5.0.4
cpe:2.3:o:ghs:integrity_rtos:5.0.4:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication header. However, when copying this header to parse, it does not ch...
An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication header. However, when copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published26 Mar 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-7714 · NVD
Track software like this
Free during beta