by Kastro
Paper/Archive/CVE-2019-12900

CVE-2019-12900

Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP — BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

EPSS 8%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 94.7.947 × 2018.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Affected

ProductAffectedFixed inSource
n/an/a–CNA
SIMATIC S7-1500 CPU 1518-4 PN/DP MFPV3.1.0 – < V3.1.5V3.1.5siemens-SADP
SIMATIC S7-1500 CPU 1518-4 PN/DP MFPV3.1.0 – < V3.1.5V3.1.5siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPV3.1.0 – < V3.1.5V3.1.5siemens-SADP
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFPV3.1.0 – < V3.1.5V3.1.5siemens-SADP
SIPLUS S7-1500 CPU 1518-4 PN/DP MFPV3.1.0 – < V3.1.5V3.1.5siemens-SADP
RUGGEDCOM ROX MX5000< V2.17.0V2.17.0siemens-SADP
RUGGEDCOM ROX MX5000RE< V2.17.0V2.17.0siemens-SADP
RUGGEDCOM ROX RX1400< V2.17.0V2.17.0siemens-SADP
RUGGEDCOM ROX RX1500< V2.17.0V2.17.0siemens-SADP
RUGGEDCOM ROX RX1501< V2.17.0V2.17.0siemens-SADP
RUGGEDCOM ROX RX1510< V2.17.0V2.17.0siemens-SADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

reflists.debian.org/debian-lts-announce/2019/06/msg00021.htmladvisoryusn.ubuntu.com/4038-2advisoryusn.ubuntu.com/4038-1refseclists.org/bugtraq/2019/Jul/22reflists.debian.org/debian-lts-announce/2019/07/msg00014.htmladvisorylists.opensuse.org/opensuse-security-announce/2019-07/msg00040.htmladvisorysecurity.FreeBSD.org/advisories/FreeBSD-SA-19:18.bzip2.ascrefseclists.org/bugtraq/2019/Aug/4advisorylists.opensuse.org/opensuse-security-announce/2019-08/msg00050.htmladvisoryusn.ubuntu.com/4146-1advisoryusn.ubuntu.com/4146-2reflists.debian.org/debian-lts-announce/2019/10/msg00012.htmlreflists.debian.org/debian-lts-announce/2019/10/msg00018.htmladvisorylists.opensuse.org/opensuse-security-announce/2019-11/msg00078.htmladvisorylists.opensuse.org/opensuse-security-announce/2019-12/msg00000.htmlreflists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b%40%3Cusers.kafka.apache.org%3Ereforacle.com/security-alerts/cpuoct2020.htmlrefpacketstormsecurity.com/files/153644/Slackware-Security-Advisory-bzip2-Updates.htmlrefpacketstormsecurity.com/files/153957/FreeBSD-Security-Advisory-FreeBSD-SA-19-18.bzip2.htmlrefgitlab.com/federicomenaquintero/bzip2/commit/74de1e2e6ffc9d51ef9824db71a8ffee5962cdbcrefsupport.f5.com/csp/article/K68713584?utm_source=f5support&amp%3Butm_medium=RSSreflists.apache.org/thread.html/rda98305669476c4d90cc8527c4deda7e449019dd1fe9936b56671dd4%40%3Cuser.flink.apache.org%3Ereflists.apache.org/thread.html/rce8cd8c30f60604b580ea01bebda8a671a25c9a1629f409fc24e7774%40%3Cuser.flink.apache.org%3Erefcert-portal.siemens.com/productcert/html/ssa-398330.htmlrefcert-portal.siemens.com/productcert/html/ssa-202008.html