Lucene search

K
cvelistZephyrCVELIST:CVE-2023-5139
HistoryOct 26, 2023 - 4:40 a.m.

CVE-2023-5139 Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver

2023-10-2604:40:36
CWE-120
zephyr
www.cve.org
3
buffer overflow
zephyr
stm32 crypto

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

EPSS

0

Percentile

5.1%

Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "packageName": "Zephyr",
    "product": "Zephyr",
    "repo": "https://github.com/zephyrproject-rtos/zephyr",
    "vendor": "zephyrproject-rtos",
    "versions": [
      {
        "lessThan": "3.5",
        "status": "affected",
        "version": "*",
        "versionType": "git"
      }
    ]
  }
]

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2023-5139