Header Menu Solutions / Studio / Services / Security / Resources / About / Search Contact WIND RIVER SECURITY CENTER Wind River is committed to active threat monitoring, rapid assessment, proactive customer notification, and timely fixes. This page brings together useful resources to help you navigate an evolving threat landscape. SECURITY ALERTS Subscribe to our Alerts RSS feed Wind River Linux Security Bulletin 2021-01-25 Wind River Linux Security Bulletin 2021-01-18 Wind River Linux Security Bulletin 2021-01-11 Wind River Linux Security Bulletin 2021-01-04 CVE RESOURCES Access our searchable database of Common Vulnerabilities and Exposures (CVEs). Search the database Recent CVEs CVE-2019-12256 | 2019-07-29 IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets’ IP options CVE-2019-12257 | 2019-07-29 IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc CVE-2019-12255 | 2019-07-29 IPNET security vulnerability: TCP Urgent Pointer = 0 leads to integer underflow CVE-2019-12260 | 2019-07-29 IPNET security vulnerability: TCP Urgent Pointer state confusion caused by malformed TCP AO option SEARCH FOR PATCHES Find and access all of our patches in our Product Documentation PUBLIC RELEASE KEYS Wind River protocol includes the use of PGP keys to sign our software. Use this public release key to sign content from your project: Linux SECURITY PRODUCTS VXWORKS WIND RIVER LINUX WIND RIVER HELIX VIRTUALIZATION PLATFORM WIND RIVER STAR LAB TITANIUM SECURITY SUITE FIND OUT WHERE YOU MIGHT BE VULNERABLE. TAKE A SECURITY ASSESSMENT VULNERABILITY NOTICES Wind River® is committed to active threat monitoring, rapid assessment and prioritization, proactive customer notification, and timely fixes. Check out the remediation information on some of the latest security vulnerabilities. View security fixes REPORT A VULNERABILITY If you have information about a security issue or vulnerability with a Wind River product or technology, you can report the issue below. A member of the Wind River security team will review your submission and work with you in resolving the issue. REPORT VULNERABILITY LATEST INFORMATION Previous Next REMEDIATION UPDATES Current updates to IPnet, Urgent/11 vulnerabilities ASSESSMENT Protected from cyberthreats? Take our survey RELATED RESOURCES POLICY STATEMENT Wind River Security Vulnerability Response Policy Wind River is committed to a response process that includes monitoring, assessment, notification, and remediation. ONLINE RESOURCE Meeting Cybersecurity, Safety, and Reliability Controls for Your Linux-Based Systems Learn how the Wind River–Star Lab product portfolio can meet the demanding aerospace and defense (A&D) requirements. ONLINE RESOURCE Securing the Software Defined World Wind River delivers the security technologies and expertise to help companies combat new cyberthreats emerging from the IoT era. SECURITY OVERVIEW Conquering Security in the IoT Era Security is embedded in our DNA at Wind River. Find out how. INDUSTRY SOLUTIONS Aerospace & Defense Automotive Industrial Medical Telecommunications Customer Success Stories TECHNOLOGY SOLUTIONS Cyber-Digital Battlefield Future of RTOS Guide to RTOS Industry 4.0 Robotics WIND RIVER STUDIO Studio Develop & Deploy Operate Services Tour Studio PRODUCTS VxWorks Wind River Linux Helix Virtualization Platform Simics Diab Compiler Titanium Security Suite Board Support Packages Try a Product SERVICES Professional Services & Support Education Services Acceleration Program RESOURCES Intelligent Systems Research Resource Center Wind River Blog Wind River Labs Web Seminars & Events White Papers SECURITY Security Center Vulnerability Responses CVE Database ABOUT About Wind River Newsroom Awards Partners Diversity & Inclusion Careers University Program Support Contact Us Compliance at Wind River | Privacy | Feedback | Country © 2021 Wind River Systems, Inc.