Lucene search
HistoryJan 25, 2023 - 2:02 a.m.
CVE-2023-0396
malicious controller
buffer overreads
hci commands
CVSS3
6.8
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
35.2%
A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses.
Affected configurations
Node
zephyrprojectzephyrRange≤3.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zephyrproject | zephyr | * | cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2023-01-25 02:02:00
cvelist
cvelist
CVE-2023-0396 Buffer Overreads in Bluetooth HCI
2023-01-19 00:00:00
cve
cve
CVE-2023-0396
2023-01-25 02:02:06
CVSS3
6.8
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
35.2%
Related for NVD:CVE-2023-0396