openocd vulnerabilities

Recent CVEs affecting openocd products. 1 tracked.

openocd has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-01-16. Highest priority: CVE-2018-5704 (score 67/100).

• CVE-2018-5704 CRITICAL 9.6 MITIGATE DOWNGRADE Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1

FAQ

How do I fix openocd vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is openocd being exploited right now?

None of the tracked openocd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which openocd CVE should I patch first?

CVE-2018-5704 currently ranks highest (67/100): Open On-Chip Debugger (OpenOCD) 0.10.0 does not block attempts to use HTTP POST for sending data to 127.0.0.1 .

Products

• open on-chip debugger

← Back to latest CVEs