SECURITY VULNERABILITY RESPONSE INFORMATION
CVE-2018-8897
Wind River® is committed to delivering secure, reliable products that keep your devices protected. As part of this commitment, our Security Response Team is constantly monitoring and assessing thousands of notifications from CERT-accepted authorities and agencies, Linux security communities such as oss-security, and our customers. Wind River prioritizes these notifications, responds, and proactively contacts customers for timely alerts, enabling them to secure their devices.
Impacted Products
A recently reported vulnerability, CVE-2018-8897, has been addressed by the Security Response Team. This software vulnerability potentially allows for Denial of Service attacks against operating system kernels and hypervisors.
CVE-2018-8897 is tracked under the following CVE entry:
We have determined that some Wind River products are impacted, including the following:
- Wind River Linux
- Wind River Pulsar Linux
- Wind River Titanium Cloud (including Wind River Titanium Server)
Customers with questions about these vulnerabilities should contact Wind River Customer Support or their local Wind River representative for information regarding mitigation.
REMEDIATION
The following is a list of Wind River products impacted by the CVE-2018-8897 vulnerability. For versions of products not listed, please contact Wind River Customer Support or your Wind River sales representative.
Product
Impacted
Versions
Remediation
We continue to monitor the situation on our security mailing lists in case there are new developments, and will post periodic updates via RSS feeds and the Wind River Support Network.
You Can’t Afford a Security Breach
This is just one of the more than 6,000 security vulnerabilities that our Security Response Team analyzes annually, and only one of the more than 1,000 annually for which we have produced a fix and rolled it out to all of our current customers.
Our support and maintenance practices and processes provide the most tangible proof of value when choosing Wind River products.
Learn more about Wind River Security practices at www.windriver.com/products/linux/security.
Customers are urged to keep their support and maintenance contracts current, and to install the latest available updates to their installed products. If you don’t know if your support and maintenance contract is current, make sure to contact your Wind River representative.