EPICS Base vulnerabilities

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker-supplied data may result in memory corruption, denial of service, or potential remote code execution.

In EPICS Base 7.0.10 and earlier, insufficient validation of element or length values in a network message can cause an out-of-bounds read. This may lead to denial of service and expose adjacent memory contents.

In EPICS Base 7.0.10 and earlier, insufficient validation of element or length values in a network message can cause an out-of-bounds read. This may lead to denial of service and expose adjacent memory contents.

In EPICS Base 7.0.10 and earlier, improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.