漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Potential out of bound read in _nx_secure_tls_process_clienthello()
Vulnerability Description
In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method length. In case of an attacker-crafted message with values outside of the expected range, it could cause an out-of-bound read.
CVSS Information
N/A
Vulnerability Type
缓冲区上溢读取
Vulnerability Title
Eclipse ThreadX NetX Duo 安全漏洞
Vulnerability Description
Eclipse ThreadX NetX Duo是Eclipse ThreadX开源的一个 IPv4 和 IPv6 双重网络堆栈。 Eclipse ThreadX NetX Duo 6.4.4之前版本存在安全漏洞，该漏洞源于_nx_secure_tls_process_clienthello函数缺少对SSL/TLS客户端hello消息中密码套件长度和压缩方法长度的验证，可能导致越界读取。
CVSS Information
N/A
Vulnerability Type
N/A