Lucene search

K
cvelistZephyrCVELIST:CVE-2023-4259
HistorySep 25, 2023 - 11:05 p.m.

CVE-2023-4259 Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver

2023-09-2523:05:40
CWE-193
CWE-120
zephyr
www.cve.org
3
buffer overflow
zephyr es-wifi
cve-2023-4259
vulnerabilities

CVSS3

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

19.7%

Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "packageName": "Zephyr",
    "product": "Zephyr",
    "repo": "https://github.com/zephyrproject-rtos/zephyr",
    "vendor": "zephyrproject-rtos",
    "versions": [
      {
        "lessThan": "3.4",
        "status": "affected",
        "version": "1.14",
        "versionType": "git"
      }
    ]
  }
]

CVSS3

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

19.7%

Related for CVELIST:CVE-2023-4259