CVE-2021-3430

Assertion reachable with repeated LLCONNECTIONPARAMREQ. Zephyr versions = v1.14 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjr...

CVE-2021-3430

Assertion reachable with repeated LLCONNECTIONPARAMREQ. Zephyr versions = v1.14 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjr...

CVE-2021-3431

Assertion reachable with repeated LLFEATUREREQ. Zephyr versions = v2.5.0 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7548-5m6f-mqv9...

CVE-2021-3433

Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...

CVE-2021-3433

Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...

CVE-2021-3432

Invalid interval in CONNECTIND leads to Division by Zero. Zephyr versions = v1.14.0 Divide By Zero CWE-369. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7364-p4wc-8mj4...

CVE-2021-3431

Assertion reachable with repeated LLFEATUREREQ. Zephyr versions = v2.5.0 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7548-5m6f-mqv9...

CVE-2021-3434

Stack based buffer overflow in leecredconnreq. Zephyr versions = v2.5.0 Stack-based Buffer Overflow CWE-121. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrm...

CVE-2021-3435

Information leakage in leecredconnreq. Zephyr versions = v2.4.0 Use of Uninitialized Resource CWE-908. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xhg3-gvj6-4rqh...

Design/Logic Flaw

Assertion reachable with repeated LLCONNECTIONPARAMREQ. Zephyr versions = v1.14 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjr...

Design/Logic Flaw

Invalid interval in CONNECTIND leads to Division by Zero. Zephyr versions = v1.14.0 Divide By Zero CWE-369. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7364-p4wc-8mj4...

Design/Logic Flaw

Information leakage in leecredconnreq. Zephyr versions = v2.4.0 Use of Uninitialized Resource CWE-908. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xhg3-gvj6-4rqh...

Design/Logic Flaw

Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...

Stack overflow

Stack based buffer overflow in leecredconnreq. Zephyr versions = v2.5.0 Stack-based Buffer Overflow CWE-121. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrm...

Authentication flaw

Assertion reachable with repeated LLFEATUREREQ. Zephyr versions = v2.5.0 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7548-5m6f-mqv9...

CVE-2021-3435 L2CAP: Information leakage in le_ecred_conn_req()

Information leakage in leecredconnreq. Zephyr versions = v2.4.0 Use of Uninitialized Resource CWE-908. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-xhg3-gvj6-4rqh...

CVE-2021-3435

CVE-2021-3435 affects Zephyr RTOS v2.4.0 and later, with information leakage in the le_ecred_conn_req() path due to Use of Uninitialized Resource (CWE-908). Public sources describe an information leakage issue in this function, affecting local attack scenarios and exposing partial confidentiality...

CVE-2021-3434 L2CAP: Stack based buffer overflow in le_ecred_conn_req()

Stack based buffer overflow in leecredconnreq. Zephyr versions = v2.5.0 Stack-based Buffer Overflow CWE-121. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8w87-6rfp-cfrm...

CVE-2021-3434

CVE-2021-3434 affects Zephyr RTOS; a stack-based buffer overflow in the le_ecred_conn_req() function is present in Zephyr versions >= 2.5.0 (CWE-121). The vulnerability is localized (LOCAL, low attack complexity) with potentially high impact to confidentiality, integrity, and availability as d...

CVE-2021-3433 BT: Invalid channel map in CONNECT_IND results to Deadlock

Invalid channel map in CONNECTIND results to Deadlock. Zephyr versions = v2.5.0 Improper Check or Handling of Exceptional Conditions CWE-703. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3c2f-w4v6-qxrp...