Lucene search

K
cvelistZephyrCVELIST:CVE-2023-4264
HistorySep 26, 2023 - 6:34 p.m.

CVE-2023-4264 Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem

2023-09-2618:34:52
CWE-122
CWE-120
CWE-121
zephyr
www.cve.org
3
cve-2023-4264
buffer overflow
zephyr
bluetooth
subsystem

CVSS3

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

AI Score

9.9

Confidence

High

EPSS

0.001

Percentile

19.7%

Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "packageName": "Zephyr",
    "product": "Zephyr",
    "repo": "https://github.com/zephyrproject-rtos/zephyr",
    "vendor": "zephyrproject-rtos",
    "versions": [
      {
        "lessThanOrEqual": "3.4",
        "status": "affected",
        "version": "0",
        "versionType": "git"
      }
    ]
  }
]

CVSS3

7.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

AI Score

9.9

Confidence

High

EPSS

0.001

Percentile

19.7%

Related for CVELIST:CVE-2023-4264