亚马逊 Amazon FreeRTOS 输入验证错误漏洞

漏洞信息详情

Amazon FreeRTOS是美国亚马逊（Amazon）公司的一套适用于微控制器的开源操作系统。

Amazon Web Services FreeRTOS 10.4.3之前版本存在输入验证错误漏洞，该漏洞源于queue.c中有一个整数溢出，用于创建队列。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/c7a9a01c94987082b223d3e59969ede64363da63

来源:MISC

链接:https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/47338393f1f79558f6144213409f09f81d7c4837

来源:MISC

链接:https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/c7a9a01c94987082b223d3e59969ede64363da63

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021070408

来源:us-cert.cisa.gov

链接:https://us-cert.cisa.gov/ics/advisories/icsa-21-119-04

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.1489.3

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021043001

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021062109

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-31571

暂无