Amazon Web Services Freertos
Approved changes feed: RSS · Atom
cpe:2.3:a:amazon:amazon_web_services_freertos:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Amazon (0ed129a9-8e26-53dc-aefe-55957e638c30) |
|---|---|
| Product | Amazon Web Services Freertos (2a928c49-57fe-57f7-8f74-7eb5b5f1c8d8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/aws/amazon-freertos |
purl2cpe | 2026-06-01 10:12:11.874028 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-13120 |
vulnerable | 2026-06-08 05:12:40.947867 |
Details available
Amazon FreeRTOS up to and including v1.4.8 lacks length checking in prvProcessReceivedPublish, resulting in untargetable leakage of arbitrary memory contents on a device to an attacker. If an attacker has the authorization to send a malformed MQTT publish packet to an Amazon IoT Thing, which interacts with an associated vulnerable MQTT message in the application, specific circumstances could trigger this vulnerability.
Published: 2019-10-07T21:57:48.000Z
Updated: 2024-08-04T23:41:10.494Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16603 |
vulnerable | 2026-06-08 05:11:05.250007 |
Details available
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds access to TCP source and destination port fields in xProcessReceivedTCPPacket can leak data back to an attacker.
Published: 2018-12-06T23:00:00.000Z
Updated: 2024-08-05T10:32:52.265Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16602 |
vulnerable | 2026-06-08 05:11:05.249566 |
Details available
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of DHCP responses in prvProcessDHCPReplies can be used for information disclosure.
Published: 2018-12-06T23:00:00.000Z
Updated: 2024-08-05T10:32:52.259Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16601 |
vulnerable | 2026-06-08 05:11:05.249114 |
Details available
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. A crafted IP header triggers a full memory space copy in prvProcessIPPacket, leading to denial of service and possibly remote code execution.
Published: 2018-12-06T23:00:00.000Z
Updated: 2024-08-05T10:24:32.905Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16600 |
vulnerable | 2026-06-08 05:11:05.248479 |
Details available
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. Out of bounds memory access during parsing of ARP packets in eARPProcessPacket can be used for information disclosure.
Published: 2018-12-06T23:00:00.000Z
Updated: 2024-08-05T10:24:32.933Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16599 |
vulnerable | 2026-06-08 05:11:05.248018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16598 |
vulnerable | 2026-06-08 05:11:05.247531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16528 |
vulnerable | 2026-06-08 05:11:05.002990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16527 |
vulnerable | 2026-06-08 05:11:05.002556 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16526 |
vulnerable | 2026-06-08 05:11:05.002200 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16525 |
vulnerable | 2026-06-08 05:11:05.001824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16524 |
vulnerable | 2026-06-08 05:11:05.000425 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16523 |
vulnerable | 2026-06-08 05:11:04.998501 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16522 |
vulnerable | 2026-06-08 05:11:04.997879 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.