Lucene search
HistoryOct 26, 2023 - 5:15 a.m.
CVE-2023-5139
buffer overflow
vulnerability
zephyr stm32 crypto
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
5.9
Confidence
High
EPSS
0
Percentile
5.1%
Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver
Affected configurations
Node
zephyrprojectzephyrRange≤3.4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| zephyrproject | zephyr | * | cpe:2.3:o:zephyrproject:zephyr:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2023-5139
2023-10-26 05:15:26
veracode
veracode
Buffer Overflow
2023-10-27 10:27:52
prion
prion
Buffer overflow
2023-10-26 05:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
5.9
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2023-5139